locoagent-social-media-automation

SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, but that purpose is itself high risk because it enables autonomous public actions on social accounts using live login sessions and reduced permission gating. Install sources are partly official and same-org, so this is not confirmed malware, but the unpinned remote installs, package-name inconsistency, and autonomous posting/following behavior make the overall skill high risk.