etsy-offsite-ads

SUSPICIOUS. The stated purpose is coherent and the visible skill text is low-scope, with no credential requests, no API proxying, and no exfiltration behavior. The main risk is transitive trust: it instructs installation of external skill content from a mutable GitHub repository via the `skills` CLI, creating medium security risk even though the publisher relationship appears legitimate.