pp-ahrefs

SUSPICIOUS. The skill is broadly coherent for Ahrefs data retrieval, but it routes access through a third-party publisher's CLI/MCP rather than an official Ahrefs client, requires external installation, and can forward retrieved data to arbitrary webhooks. Same-org open-source distribution lowers concern from malicious to medium-risk, but the extra trust layer and unpinned install paths make it unsuitable to classify as benign.