product-hunt-launch

SUSPICIOUS: the skill’s purpose is plausible, but it expands into remote CLI execution, third-party hosted app routing, and transitive skill installation. The install source appears same-org and not overtly malicious, yet the mutable raw-GitHub docs, curl|sh installer, CLI-name mismatch, and platform-mediated data/auth flows make the footprint broader than a simple Product Hunt advisory skill.