pp-plane

SUSPICIOUS. The skill’s stated Plane-management purpose is coherent, but its actual trust footprint is not proportionate: it routes installation and credential use through a third-party Printing Press toolchain, uses mutable/rolling install sources, and adds MCP/transitive trust plus optional arbitrary webhooks. This looks more like a risky unofficial integration than confirmed malware.