sales-sellfy

SUSPICIOUS: The core Sellfy guidance is largely benign and well-aligned, with no direct credential exfiltration or hidden network activity. However, the skill includes a transitive install instruction to fetch another skill from a third-party repo, and that install path does not match the claimed Sellfy publisher, creating a meaningful trust and scope mismatch.