pp-openai-ads

SUSPICIOUS. The skill’s purpose largely matches its capabilities, but it materially expands trust to same-org third-party binaries, uses mutable install targets, forwards Ads credentials into that CLI, and supports arbitrary webhook egress plus background learning writes. This looks more like a high-risk vendor integration skill than confirmed malware.