pp-ashby

SUSPICIOUS. The core read-only Ashby job-board purpose mostly matches the CLI behavior, but the trust boundary is broader than the description suggests: users must install a third-party personal-owner CLI ecosystem, and the skill introduces persistent local learning plus optional webhook delivery. I do not see confirmed malware or credential theft, but the install provenance and extra stateful behaviors make it higher risk than a simple public-board reader.