paid-ads-x

SUSPICIOUS. The wrapper’s purpose is coherent, and same-org distribution evidence reduces installer concerns, but the real instructions are delegated to an unseen file and X Ads data/actions are mediated by a third-party NotFair MCP rather than official X infrastructure. That makes the skill medium risk due to incomplete transparency and intermediary data flow, not confirmed malware.