pp-expensify

SUSPICIOUS. The skill's capabilities generally match its stated Expensify purpose, but it expands trust to a third-party CLI/MCP tool that must be installed first and then receives Expensify session tokens or partner credentials. Same-org/source-visible provenance lowers concern versus a random payload, yet unpinned installs, local secret storage, admin/report-action scope, and arbitrary webhook output keep the overall risk at medium.