ai-festival-campaign-generator

SUSPICIOUS. The core capabilities and Google/Gemini data flows fit the stated marketing-automation purpose, but trust is weakened because the skill published by ara.so tells users to clone and import a workflow from an unrelated personal GitHub repo with limited release provenance. Main risk is supply-chain and automated outbound email, not confirmed malware or credential theft.