pp-agentpool

SUSPICIOUS: the skill’s stated purpose is coherent, but it inserts a third-party wrapper between the user and the official AgentPool CLI and installs it via mutable remote paths from a personal publisher. No explicit credential theft or malicious exfiltration is shown, so this looks more like medium supply-chain/trust risk than confirmed malware.