marketing-launch

SUSPICIOUS: The skill’s purpose is coherent, but it expands scope by requiring a transitive browser-automation skill with optional authenticated access and by ingesting untrusted web content while retaining write capability. Install provenance looks same-org and official, so this is not confirmed malware; the main risks are transitive trust, indirect prompt injection, and real-world posting capability.