popopo-cli

SUSPICIOUS. The skill’s purpose and capabilities mostly align, but its core install step depends on an unverified globally installed CLI package. That creates a disproportionate trust risk, especially because the tool handles persisted authenticated session state and can perform real account/live-space actions.