ai-marketing-claude-suite

SUSPICIOUS. The skill's capabilities broadly fit a marketing suite, and its network/file access is proportionate to website analysis and report generation. The main issue is install trust: a mutable raw GitHub pipe-to-shell installer and direct shell-script execution from a personal repo, plus weak publisher linkage between ara.so branding and the GitHub source. No clear credential harvesting or malicious exfiltration is shown, but the supply-chain risk is high enough to treat cautiously.