synter-mcp-setup

SUSPICIOUS: the skill is largely coherent with its stated advertising-operations purpose and uses same-org npm/domain infrastructure, so it does not look overtly malicious. Risk comes from forwarding API credentials and ad-account activity through Synter’s hosted MCP, operating on live paid media systems, and instructing installation of additional skills through a separate skills registry/CLI trust chain.