pp-facebook-marketplace

SUSPICIOUS. The skill's capabilities broadly match its stated Facebook Marketplace workflow purpose, but it expands trust to an external CLI installer and allows account-affecting actions plus arbitrary webhook delivery. This looks more like a high-risk automation/integration skill than confirmed malware: coherent purpose, but medium supply-chain and data-routing risk.