business-ads

The skill’s stated purpose largely matches its capabilities, and no third-party installer, proxy endpoint, or explicit credential harvesting path is shown. The main risk is that it combines untrusted social-media content ingestion with browser automation and public reply posting, which is a medium-risk workflow even without direct evidence of malicious intent.