pp-fireflies

SUSPICIOUS. The skill is broadly coherent for Fireflies meeting analysis, but its real footprint is larger than a simple API guide: it installs third-party executables, forwards the Fireflies API key to them, supports arbitrary webhook delivery of meeting data, and even installs an MCP server. Provenance is same-owner and documented, so this is not confirmed malware, but the trust and data-flow scope are disproportionate enough to warrant medium-high caution.