sm-post

SUSPICIOUS. The skill's core behavior matches its stated purpose and routes data to Ayrshare's official API, so it is not strongly indicative of malware. However, it enables autonomous public posting, defaults toward broad distribution, and depends on an unseen local helper script, making it a meaningful security risk despite generally coherent scope.