pp-dataforseo

SUSPICIOUS. The skill’s SEO/DataForSEO purpose is coherent, but its trust model is not: it installs and relies on a third-party binary outside the official DataForSEO toolchain, then forwards DataForSEO credentials into it. Optional arbitrary webhook delivery further expands exfiltration risk. This is not confirmed malware, but it is a high-risk skill due to external binary trust and credential forwarding.