pp-supermemory-admin

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install paths are same-publisher documented rather than obviously deceptive, but it relies on third-party non-vendor wrapper binaries, uses unpinned installs, forwards API credentials to those binaries, supports arbitrary webhook output delivery, and instructs MCP server installation. This is a coherent admin integration, but with medium supply-chain and data-flow risk that is higher than a direct official API skill.