pp-surgegraph

SUSPICIOUS. The skill's purpose fits SurgeGraph operations, but its actual footprint relies on a third-party Printing Press distribution path that does not clearly match the stated publisher, then asks that externally distributed CLI to handle OAuth tokens and real publishing actions. The official SurgeGraph endpoint helps, but the install-trust and credential-forwarding chain are not proportionate or well-aligned.