crosspost

SUSPICIOUS. The skill's capabilities broadly match its purpose, but it enables autonomous public posting and includes an example that sends content and a bearer token through a third-party crossposting service instead of official platform APIs. There is no strong malware evidence or installer abuse, but the real-world posting authority and intermediary data flow make it medium risk.