content-scheduler

SUSPICIOUS. The skill’s purpose and main data flows are mostly coherent for content scheduling, but it relies on broad MCP permissions and forwards credentials to unpinned runtime-installed MCP servers. Slack looks official; the Notion install path is same-org but outdated and inconsistent with current official guidance, which raises medium supply-chain and credential-handling risk rather than indicating confirmed malicious intent.