pp-printify

SUSPICIOUS. The core Printify automation purpose is coherent, and install sources appear same-publisher, but the skill expands trust to external CLIs with unpinned installs, contains a path inconsistency in install instructions, and supports arbitrary outbound webhook delivery and optional feedback posting to non-official endpoints. This is not confirmed malware, but it has meaningful supply-chain and data-flow risk beyond a narrowly scoped Printify skill.