social-post-writer

SUSPICIOUS: the skill’s purpose and capabilities are mostly aligned for social content drafting, but it relies on an unverifiable Tiger Den MCP backend that handles potentially sensitive internal marketing and customer-reference data. No direct malware behavior, credential theft, or covert execution is shown, but the opaque external dependency and unclear data-flow ownership make this a medium-risk skill.