pp-flight-goat

SUSPICIOUS: the skill’s travel purpose mostly aligns with its commands, but it offloads core behavior to externally installed binaries, uses mutable install paths, and exposes arbitrary webhook/alert delivery paths that can send outputs off-box. This is not confirmed malicious, but the install trust and outbound delivery scope are broader than a simple flight-search helper.