product-hunt-launch

SUSPICIOUS: The skill’s purpose is plausible, but its footprint is broader than needed because it installs another skill, depends on an external CLI, and routes data through inference.sh as an intermediary to third-party tools. The install path appears officially documented rather than overtly malicious, so this is not confirmed malware, but the transitive trust chain and credential/data forwarding make it medium-high risk.