pp-ebay

SUSPICIOUS. The overall purpose and capabilities are mostly coherent for an eBay research CLI, and the install sources appear same-org rather than an unrelated third party. The main concerns are supply-chain trust in required external binaries, unpinned `@latest` installs, MCP registration, browser-cookie-based auth, and the ability to send outputs to arbitrary webhooks; these elevate security risk without showing confirmed malicious intent or credential harvesting.