pp-adminbyrequest

SUSPICIOUS: the skill’s capabilities mostly match its admin purpose, but it relies on an external CLI from a differently named publisher, forwards a tenant API key to that binary, supports arbitrary webhook export, and can perform high-impact approval/PIN actions. This looks more like a powerful but trust-heavy admin integration than confirmed malware.