pp-gorgias

SUSPICIOUS: the skill is broadly aligned with Gorgias administration, but it expands trust to a third-party personal-publisher CLI that handles Gorgias credentials and supports arbitrary webhook delivery of results. Public source and same-publisher provenance reduce malware confidence, yet the unpinned install path and credential forwarding through an external tool make this a medium-risk skill rather than benign.