marketing-harness

SUSPICIOUS. The purpose is coherent, but the skill’s execution model depends on an unverified `marketing` CLI/MCP harness with unclear publisher provenance, then likely forwards provider credentials and user inputs through it. The approval/budget rules are good, but install trust and opaque data flow make the overall footprint higher risk than a normal documentation skill.