pp-redmine

SUSPICIOUS. The skill's capabilities broadly match a Redmine automation/mirroring tool and its main API data flow is proportionate, but it requires trusting externally installed binaries, includes unpinned install paths, and can route output to arbitrary webhooks. This looks more like a high-trust developer workflow skill than outright malware, yet the install and delivery footprint is broader than a simple Redmine helper.