pp-clinical-trials

SUSPICIOUS: the skill’s purpose is coherent, but it requires installing and executing a non-vendor third-party CLI and MCP server, with unpinned fallback installation and optional arbitrary webhook delivery. Data access is mostly proportionate and read-only, so this is not confirmed malware, but the external-tool trust chain and outbound delivery features make it a medium-risk skill.