brand-guidelines

SUSPICIOUS: The core brand-manual purpose is coherent, and there is no clear malware or deceptive payload. The main risk is data-flow integrity: the skill explicitly allows API keys and brand assets to be routed through a third-party OpenAI-compatible gateway, and it inherits transitive trust from 11 child skills plus unspecified local Python scripts.