holiday-campaign

SUSPICIOUS: The core skill purpose is benign and well-aligned with marketing-visual planning, but its optional rendering path weakens data-flow integrity by encouraging use of arbitrary OpenAI-compatible gateways, including tryallapi.com. This is not malware, but it does introduce medium security risk because prompts, brand assets, and API credentials may be sent to an unrelated third party instead of official OpenAI endpoints.