pp-godaddy

SUSPICIOUS. The skill’s general purpose is coherent, but its actual footprint is broader than a normal vendor-authored API helper: it installs and trusts a third-party CLI, forwards GoDaddy credentials into that CLI, allows arbitrary webhook delivery, and permits API base URL overrides that can redirect authenticated traffic. Not confirmed malware, but high enough risk to treat as a sensitive third-party integration rather than a benign first-party GoDaddy skill.