pp-qbo

SUSPICIOUS: the skill is largely purpose-aligned for QuickBooks automation and uses same-publisher install sources, so it is not overtly malicious. However, it delegates sensitive accounting actions and OAuth secrets to external CLIs, supports arbitrary webhook output delivery, and includes transitive MCP installation, making its operational footprint broader and riskier than a minimal direct-integration skill.