pp-squarespace

SUSPICIOUS: the skill’s broad commerce mutation capabilities and arbitrary webhook output are not fully aligned with its read-focused description, and it forwards sensitive tokens/session cookies into an external CLI. Install sources are not overtly malicious, but the overall footprint is high-trust and wider than the stated purpose.