marketing-pipeline-content-automation

SUSPICIOUS. The skill’s core capabilities mostly match its marketing-automation purpose, but trust is reduced by the mismatch between the ara.so publisher and the unrelated GitHub repo used for installation, plus autonomous publishing and prompt-injection exposure from untrusted external content. No confirmed malware or overt credential theft is present.