pp-wanderlust-goat

SUSPICIOUS: the travel-research purpose broadly matches the CLI’s read-oriented capabilities, but the skill relies on unpinned third-party installs and adds arbitrary outbound delivery/webhook features that are broader than necessary. No clear evidence of malware or credential theft, yet install trust and data-flow scope make this medium-to-high risk.