pp-ifood

SUSPICIOUS: the core purpose and capabilities are mostly aligned, and the install sources appear to be same-publisher npm/Go channels rather than an unrelated payload. However, the skill expands trust to external binaries and an optional MCP server, accepts direct bearer-token auth, and provides arbitrary webhook output delivery, making its footprint broader than a simple quoting helper. This looks more like a high-trust integration than confirmed malware.