pp-seats-aero

SUSPICIOUS: the core Seats.aero read-only purpose, API key use, and command set are broadly coherent, but the skill expands beyond simple querying by installing external binaries, adding an MCP server, and allowing arbitrary webhook/feedback endpoints for outbound data. This looks more like a high-exposure integration than clear malware, with medium security risk driven by supply-chain trust and optional exfiltration paths.