sales-mentiondrop

SUSPICIOUS. The core skill is mostly a benign documentation/router skill, but it contains two notable risk signals: advice to send webhook payloads to webhook.site and a transitive skill installation instruction. There is no direct malware behavior, hidden execution, or credential harvesting in the provided text, but the external payload-debug flow and inherited trust chain raise medium security concerns.