pp-plexctl

SUSPICIOUS. The skill is largely coherent as a Plex administration/documentation wrapper, and its install sources appear same-publisher and public rather than overtly deceptive. However, it has a broad operational footprint, installs external CLIs, stores tokens locally, supports arbitrary webhook delivery of results, and uses an unpinned @latest Go fallback; those factors make it medium risk even without clear malicious intent.