pp-webflow

SUSPICIOUS: the skill is broadly coherent for Webflow management, but it materially expands trust to a third-party CLI/MCP toolchain and persistent local learning system. Install sources appear same-publisher and not overtly malicious, yet the unpinned Go installs, credential handling by external binaries, and optional arbitrary webhook delivery make the overall risk medium rather than benign.