ai-content-pipeline-automation

SUSPICIOUS: The skill’s capabilities broadly match its stated purpose, and data flows mostly go to expected AI/scraping/rendering components. The main concern is install trust and scope: ara.so publishes a guide that directs users to clone and run an unrelated personal repository while providing multiple sensitive credentials, creating meaningful third-party supply-chain exposure without clear same-org provenance.