pp-intervals-icu

SUSPICIOUS. The skill is mostly coherent with its stated intervals.icu purpose, and the install sources appear tied to the same publisher, so this is not strong evidence of malware. Risk comes from requiring an external CLI with API-key access, mutable installer paths, optional webhook delivery of outputs to arbitrary URLs, and MCP-based transitive trust; these are proportionate enough to avoid a malicious verdict but significant enough to rate as medium risk.