pipa-triggers

SUSPICIOUS: The skill’s capabilities mostly match its purpose, and it includes sensible confirmation/scope controls. The main risk is that it reads runtime secrets and routes all trigger-management data through a Pipa gateway whose public ownership/API documentation is not strongly verifiable, while enabling persistent real-world automations with future external actions.