pepper-state

SUSPICIOUS: The skill’s purpose and capabilities mostly align with a remote workspace-state utility, and there is no downloader or hidden execution behavior. The main risk is data-flow integrity: both the bearer token and stored context are sent to a fully user-supplied base URL, while the exact state endpoints/auth pattern were not publicly verified. This is not confirmed malware, but it is a medium-risk skill because trust depends entirely on correct endpoint configuration.