pp-flow

SUSPICIOUS: the skill’s capabilities mostly fit its stated Flow-helper purpose, and installs appear same-publisher rather than obviously malicious. However, it depends on manual harvesting of raw Google session credentials, supports arbitrary webhook delivery, and expands trust via MCP installation, making the overall footprint higher-risk than a normal documentation or API-integration skill.