geo-reddit

The skill is mostly aligned with its stated marketing-analysis purpose and uses Xpoz endpoints that appear to belong to the same publisher, so it is not confirmed malware. However, it has meaningful security concerns: it asks users to paste secrets into chat and it may fetch and follow another skill from raw GitHub content, creating credential-handling and transitive-trust risk. Overall classification: SUSPICIOUS.