news-seo-pdf-report

SUSPICIOUS: the stated purpose is coherent, but this wrapper skill mainly installs and runs external sub-skills from GitHub, creating a transitive trust chain. No direct credential theft or exfiltration is visible here, yet the runtime installation and execution of downstream skills makes the overall security posture medium risk.