pp-table-reservation-goat

SUSPICIOUS. The skill's reservation purpose broadly matches its capabilities, but it requires trusting an external CLI/MCP toolchain and forwarding high-value credentials (browser cookies and Resy password) into that binary. Optional webhook delivery and auto-booking further raise impact. Main concern is install and credential trust, not clear evidence of confirmed malware.