pp-goodreads

SUSPICIOUS. The skill is largely coherent with its Goodreads automation purpose and uses same-project install sources, so it is not fundamentally incompatible or clearly malicious. Risk is elevated because it requires extraction and handling of live browser credentials, installs an external binary wrapper, supports authenticated write actions on the user's account, and can forward output to arbitrary webhooks.