gtm-sales-pack

SUSPICIOUS: the core interview-and-write behavior matches the stated purpose, but the optional Gmail voice feature reads a local OAuth token and mines sent email content, which is sensitive and more invasive than a simple sales-pack generator. No clear off-device exfiltration is described, so this is not confirmed malware, but the personal-repo provenance and credential-backed email access make the skill medium risk.