Social Media Management

This skill's content itself looks like a legitimate B2B content-writing guide, but two issues need attention before installing: (1) always:true: the skill is force-included in every agent run — unnecessary for a passive doc and increases risk if the skill contains manipulative text, and (2) unicode-control-chars: the SKILL.md contains invisible control characters that could be used to hide or alter instructions. What to do next: - Inspect the SKILL.md and README as raw bytes (cat -v, hexdump -C, or an editor that shows invisible characters) and remove any unexpected control characters. Ask the author why they were included. - Ask the publisher/maintainer to explain why always:true is necessary; request a version without always:true. Default for most skills should be not always-included. - Verify the skill author/source. The SKILL.md metadata references a GitHub profile; confirm that profile and check the original repository for identical content and no hidden directives. - If you do not trust the origin or cannot remove always:true and the control characters, do not install the skill or limit its permissions (do not allow autonomous invocation/force-inclusion). Consider running any evaluation in an isolated/test agent environment first. If the author provides a cleaned SKILL.md (no control chars) and removes always:true, this skill would be coherent and low-risk; until then treat it as suspicious.