pp-superhuman

The skill is mostly coherent with its stated email-automation purpose and uses same-owner, source-available install paths, so it does not show strong signs of malware. However, it carries meaningful security risk because it requires a separately installed CLI, reads browser-based auth state, can send real emails and mutate account data, and can route output to arbitrary webhooks. Overall this is best classified as suspicious/high-risk automation rather than malicious.