pp-freshservice

The skill is mostly coherent with its Freshservice automation purpose, but it relies on a third-party CLI/install chain and adds an unnecessary arbitrary webhook delivery feature plus MCP transitive trust. This is not confirmed malware, but it is higher-risk than a simple direct Freshservice integration and should be treated as suspicious/medium risk.