social-media-publishing

SUSPICIOUS. The skill’s core capabilities match its stated social-publishing purpose, but it grants an AI agent the ability to perform live public posting across several services, which is inherently high impact. The biggest integrity concern is the Modal-backed YouTube path, which introduces a third-party intermediary for uploads instead of a clearly direct official API flow. Not confirmed malware, but it is a high-risk operational skill that should only be used with strict human approval for each live action.