pp-dndbeyond

SUSPICIOUS. The core read-only D&D Beyond and local PDF normalization purpose mostly matches the stated capability, and the install sources appear same-org and official. However, the skill’s footprint is broader than its description: it installs external binaries, persists user queries and session-derived learnings locally, encourages silent background writes, and can POST outputs to arbitrary webhooks. These are disproportionate to a simple public-page reader/normalizer and raise medium security concern, but there is not enough evidence of confirmed malware or credential theft.