reddit-post

SUSPICIOUS: the skill's core behavior matches its stated purpose, and it does not exfiltrate to third-party endpoints or use risky installers, but it enables authenticated public posting from the user's real browser session and includes evasion/spam-avoidance guidance. High operational risk from browser control and autonomous posting, low evidence of malware.