pp-ars-sicilia

SUSPICIOUS. The skill’s capabilities are mostly coherent with its stated read-only public-records purpose, but it relies on an externally installed CLI from a different publisher account, uses unpinned install paths, and supports arbitrary webhook delivery plus MCP binary registration. These are medium supply-chain and outbound-data risks rather than confirmed malicious behavior.