pp-inaturalist

SUSPICIOUS: the skill is not overtly malicious, and its installers appear tied to the referenced Printing Press project, but its actual footprint is broader than its stated wildlife-briefing purpose. It installs unpinned external CLIs, supports MCP registration, can perform authenticated write actions, and can route output to arbitrary webhooks, so the overall risk is medium rather than benign.