pp-pipedrive

SUSPICIOUS: overall purpose and capabilities mostly align with a Pipedrive CLI skill, and the publisher/source relationship is coherent. Main concerns are unpinned same-org install paths, optional arbitrary webhook delivery of CRM output, and added trust surface from MCP/server installation; these are medium risk supply-chain and data-routing issues rather than confirmed malicious behavior.