pp-gainsight

SUSPICIOUS. The skill's capabilities mostly match its stated read-only Gainsight purpose, but it requires installing third-party executables from a personal publisher scope and allows optional delivery of retrieved data to arbitrary webhooks. This looks more like a risky external-tool wrapper than outright malware: coherent purpose, but medium supply-chain and data-routing risk.