pp-masterpark

SUSPICIOUS. The skill is broadly aligned with its travel-booking purpose and uses same-org install paths rather than obvious attacker infrastructure, but it relies on an unofficial external CLI, forwards credentials from 1Password into that CLI, and can perform live bookings. This is not confirmed malware, yet the trust and credential-forwarding footprint is larger than a simple booking helper and warrants medium risk.