engage

SUSPICIOUS. The skill’s purpose and capabilities are broadly aligned, and the user-approval rule meaningfully limits abuse. However, the core backend is an unnamed, unverified social scheduler MCP with no install provenance, publisher identity, or endpoint transparency, creating medium trust and data-flow risk rather than confirmed malicious behavior.