pp-pcgs

The skill’s PCGS lookup and caching capabilities mostly match its stated purpose, but trust is weakened by reliance on external binaries from a different publisher namespace, unpinned install paths, and optional arbitrary webhook/feedback egress. Overall this is better classified as suspicious rather than malicious: coherent purpose, but medium risk due to install trust and outbound data-routing features.