lead-magnet

SUSPICIOUS: the core purpose and most capabilities are coherent for a content-to-vault publisher, but the footprint is moderately risky because it performs live production SQL writes/publication, uses a third-party Apify actor for Instagram fallback, and includes transitive skill-install instructions. No clear malware or concealment is present; this is a medium-risk publishing automation with supply-chain and real-world action concerns.