pp-surgegraph

SUSPICIOUS. The skill’s product-facing capabilities mostly fit its stated SurgeGraph workflow purpose, but its trust model is not well aligned: it asks the agent to install and rely on a third-party/personal-distributed CLI rather than a clearly SurgeGraph-operated package path, then grants that CLI access to OAuth-authenticated project data and CMS publishing actions. Optional arbitrary webhook delivery also creates a non-official exfiltration path. This is not confirmed malware, but it is a high-risk skill due to supply-chain and data-routing concerns.