pp-twelvelabs

SUSPICIOUS. The skill's video-analysis capabilities largely match its stated purpose, but its footprint depends on a non-official third-party CLI/MCP tool that receives the user's Twelve Labs API key and can route outputs to arbitrary webhooks. This is more a trust and credential-forwarding concern than confirmed malware.