pp-delta-trip

SUSPICIOUS: the skill’s read-only trip-inspection purpose mostly matches its capabilities, and the install sources are same-publisher and documented. However, it relies on external installer tooling with unpinned mutable installs and adds an arbitrary webhook delivery path that can export sensitive trip data beyond the stated purpose, raising medium security risk without clear evidence of malware.