pp-google-trends

SUSPICIOUS: the skill is largely coherent with its stated Google Trends purpose and uses same-org install paths, so it is not fundamentally malicious. However, it expands trust to installed executables, forwards Chrome session cookies into the CLI, uses mutable `@latest` installs, supports arbitrary webhook delivery, and optionally installs an MCP server; these make it medium risk despite generally aligned purpose and data flows.