pp-groq

SUSPICIOUS. The skill’s API scope matches its Groq purpose, but it materially expands trust to third-party Printing Press executables and MCP tooling rather than Groq-official clients. Data mainly flows to Groq as claimed, yet optional arbitrary webhooks plus hidden-in-background learning writes make the footprint broader than a simple Groq terminal helper. Risk is driven by third-party install chain, unpinned updates, and autonomous side-effect features, not by confirmed credential theft or malware.