pp-substack

SUSPICIOUS. The skill's capabilities broadly match its stated Substack-management purpose, and the install sources appear same-org and publicly verifiable rather than obviously malicious. Main concerns are the need to trust external CLIs, unpinned installs, authenticated access via browser cookies, optional webhook delivery to arbitrary URLs, and write-capable publishing actions; these raise security risk but do not show confirmed credential theft or covert exfiltration.