pp-instacart

SUSPICIOUS. The skill's capabilities broadly match its Instacart/cart-management purpose and use same-publisher install sources, so it is not fundamentally incompatible or clearly malicious. However, it requires trusting an external CLI, uses unpinned/latest installation paths, fetches remote repo content at runtime, injects JS into a logged-in browser for history backfill, and can take account actions on the user's behalf; these make it a medium-risk skill even though the data flows appear purpose-consistent.