pp-intervals-icu

SUSPICIOUS. The core purpose and requested Intervals.icu credential are mostly coherent, and installs come from official registries pointing to the same GitHub/npm namespace. However, the skill’s real footprint is broader than simple offline analytics: it requires trusting external CLI/MCP binaries, supports live write/delete actions, and can forward results to arbitrary webhook URLs. This is not confirmed malware, but it is a medium-risk skill with notable supply-chain and data-routing concerns.