claude-code-marketing-skills

SUSPICIOUS. The skill's marketing-analysis purpose broadly matches its capabilities, and the Cogny/GitHub publisher relationship appears coherent. Main concerns are the unpinned curl|bash installer and the fact that premium account data is routed through Cogny's hosted MCP gateway rather than directly to vendor APIs; that data flow is disclosed and central to the product, but it meaningfully increases trust requirements. Overall this looks like a legitimate but medium-risk managed integration skill, not confirmed malware.