max

SUSPICIOUS. The skill's stated purpose as a GTM router/coach is broadly consistent with its instructions, and there is no evidence of credential theft, stealth, or malicious exfiltration. However, its main behavior is to drive installation of many other repo-backed skills, creating significant transitive trust risk; optional ZIP installs from a personal site further raise install-trust concerns. Medium risk overall due to delegated supply-chain exposure, not confirmed malware.