pp-skool

SUSPICIOUS. The skill is broadly coherent with its stated Skool admin/analytics purpose and uses same-owner install sources, so it is not clearly malicious. However, it requires a separate external CLI, includes mutable install paths, can read browser-backed auth material, supports arbitrary webhook delivery, and exposes real-world moderation/posting actions; those make it a medium-risk agent skill rather than a benign documentation-only guide.