pp-sec-edgar

SUSPICIOUS: The skill’s capabilities largely match its stated SEC-research purpose and data flows are mostly proportional, but it depends on externally installed binaries from a personal publisher and an unpinned Go fallback. Webhook delivery is potentially sensitive but is transparent and user-directed, so the main concern is install trust rather than confirmed malicious behavior.