pp-netlify

SUSPICIOUS. The skill’s purpose broadly matches its Netlify-focused capabilities, and the installer paths appear same-org and official enough to avoid a malicious classification. But it expands trust to custom binaries, uses unpinned installs, forwards Netlify credentials to non-official tooling, supports arbitrary webhook delivery of output, and installs an MCP server, making its footprint materially riskier than a simple Netlify helper.