viral-replicator

SUSPICIOUS: the skill is purpose-aligned, but it relies on scraping protected third-party platforms with anti-bot controls and unpinned MCP discovery. I see no strong signs of credential theft or covert exfiltration, yet the external data acquisition pattern and broad trust in local scrapers create moderate security and compliance risk.