video-publisher

SUSPICIOUS: the skill itself is a benign-looking orchestrator, but its entire function depends on transitive delegation to unreviewed publishing skills that may upload content publicly and handle credentials. No direct malware or exfiltration is present in this artifact, but the trust boundary is pushed into external skills with unspecified provenance and behavior.