pp-dominos

SUSPICIOUS: the skill is largely coherent with its stated Domino's ordering purpose and uses same-publisher install sources, so it does not look fundamentally deceptive. Risk comes from installing external CLIs/MCPs, handling persisted bearer tokens, optional webhook output, and enabling autonomous food purchases; these are proportionate but materially security-relevant.