publish-substack-article

SUSPICIOUS: the core Substack draft automation is coherent and the PyPI/browser-tool dependencies are proportionate, but the table workflow expands scope by chaining into another skill and sending article table content to a third-party domain unrelated to Substack. Main concern is supply-chain/data-flow trust, not confirmed malware.