pp-squarespace

SUSPICIOUS: the overall footprint is mostly coherent for a Squarespace admin skill, and the installer appears same-publisher and source-visible rather than malicious. However, the description downplays substantial write capabilities, the skill asks the agent to use raw session cookies, and the CLI can forward results to arbitrary webhooks, creating moderate supply-chain and data-exfiltration risk.