marketing-cro

SUSPICIOUS: the stated CRO purpose is largely coherent, but the skill meaningfully expands scope by requiring a transitive browser-automation skill that can access authenticated sites and process untrusted web content while writing local artifacts. Install provenance appears same-org and official, so this is not strong evidence of malware, but the combined transitive-install and browser-content/action footprint makes it medium risk.