cgenius

The skill’s stated purpose matches its requested capabilities: it gathers marketing/content inputs and sends them to a same-service API for generation, scheduling, and analytics. Main concerns are transitive trust from installing a third-party skill via the Skills CLI and forwarding sensitive content plus API tokens to a beta-hosted external service; this is suspicious enough for medium risk, but there is no clear evidence of malicious exfiltration or capability mismatch.