marketing-studio-agent

SUSPICIOUS: the skill's capabilities broadly fit its marketing-rendering purpose, but install trust is weak. The main concern is provenance mismatch (ara.so skill pointing to a personal GitHub repo), execution of local install scripts from that repo, and transitive installation of more skills into the agent. No clear credential theft or exfiltration is shown, but the trust chain is broader than the branding suggests.