content-publisher

SUSPICIOUS: the skill’s broad behavior mostly matches a content-publishing workflow, but the actual setup is internally inconsistent with official package/docs references and enables autonomous public publishing plus untrusted-content ingestion. This looks more like a high-risk, loosely specified automation skill than confirmed malware.