eugene-schwartz-breakthrough-advertising

SUSPICIOUS: the skill’s stated purpose is benign and its content is mostly framework documentation, but it includes a transitive skill installation step through a third-party CLI with unpinned trust and unverifiable publisher linkage. No direct credential theft, exploit behavior, or mismatched data flows are present in the skill text itself.