pp-google-search-console

SUSPICIOUS: the skill is broadly aligned with Google Search Console analysis, but it relies on third-party installed binaries from a different publisher identity, forwards live OAuth tokens into that CLI, and allows arbitrary outbound webhook delivery plus write-capable site management actions. This is more than a normal documentation skill and carries high trust and data-handling risk even without clear proof of malware.