sales-openinfluence

SUSPICIOUS: the core Open Influence guidance content is benign and well-scoped, but the included `npx skills add ...` instruction creates a transitive trust chain to an unrelated third-party skill repo and unpinned external CLI execution. No signs of credential theft or exfiltration were found, so this is a medium supply-chain/trust concern rather than malware.