pp-table-reservation-goat

SUSPICIOUS. The skill’s capabilities mostly match its reservation-management purpose, and the documented installer appears same-org/official, so this is not confirmed malware. However, it requires trusting an external CLI with booking authority, uses transitive and unpinned install paths, supports arbitrary webhook delivery, and includes semi-hidden background actions; these make the overall footprint higher-risk than a normal documentation-only skill.