landing-page

SUSPICIOUS: the local build behavior is broadly consistent with a landing-page skill, but the mandatory WebMCP injection, mutable external CDN dependency, automatic companion-skill orchestration, and potential autonomous deployment make the footprint broader than necessary for the stated purpose. No confirmed malware or direct credential theft is evident, but the skill carries meaningful supply-chain and scope-expansion risk.