ccpi-marketplace

SUSPICIOUS. The skill’s capabilities broadly match its stated marketplace-management purpose, and the main installer uses npm rather than a direct remote script. However, it introduces transitive trust by installing additional plugin packs, and provenance is only moderately coherent due to split identities and naming drift across docs, GitHub, and npm. No clear credential theft or malicious exfiltration is evident, but the skill should be treated as medium risk because it expands the agent’s trust chain to external marketplace content.