pp-janeapp

SUSPICIOUS. The main issue is internal inconsistency: the metadata says the skill can book/manage appointments, while the body explicitly restricts use to read-only inspection and forbids mutating actions. Supply-chain risk is moderate because installation is same-publisher and publicly documented, but unpinned. Credential/session handling is broad for a read-only terminal helper, yet data flows mostly align to Jane or local storage, with optional webhook delivery as the main exfiltration-capable feature.