pp-gainsight

SUSPICIOUS: the skill’s read-only Gainsight purpose mostly matches its capabilities, but it depends on same-author third-party binaries rather than official Gainsight tooling, uses unpinned installs, and includes arbitrary webhook delivery that can exfiltrate customer data. Risk is moderate rather than overtly malicious because the data flows are documented and the scope is otherwise fairly constrained.