marketing-pipeline-automated-content

SUSPICIOUS: the skill’s capabilities broadly fit its stated marketing-automation purpose, and the documented data flows mostly match official AI/video tooling. The main concern is install trust: ara.so publishes the skill, but it directs users to clone a separate personal GitHub repository and run unpinned package installs, which weakens provenance and supply-chain integrity. No clear credential exfiltration, hidden execution, or malicious endpoint routing is evident from the provided content.