auto-content-creator

What to consider before installing/using this skill: - The skill’s purpose and the included Python script align (content generation) and it asks for no secrets — that is good. - However, SKILL.md shows a CLI named 'auto-content' while the package only includes scripts/content-generator.py and no install instructions or entrypoint. Expect to run the script directly with python or create your own wrapper; the documentation is inconsistent. - The script writes output to /tmp and will read any input files you give it (batch, rewrite). Do not feed it sensitive documents or credentials. - The visible code does not import network libraries, which reduces exfiltration risk, but the provided file in this listing is truncated near save_result; the tail of the script could contain additional behavior (network calls, subprocess execution, telemetry). Because of that truncation, exercise caution: inspect the rest of scripts/content-generator.py (the full file) for any subprocess, open network sockets, HTTP/HTTPS requests, or code that reads files outside of user-supplied inputs before running it. - If you plan to run it, run inside a sandbox/container, or at least review the complete script and confirm there are no calls to subprocess, os.system, sockets, or external endpoints. Ask the publisher for an install script or a signed release, and prefer packages with a homepage or identifiable author if you need to use it in production.