pp-yeswehack

SUSPICIOUS: mostly coherent with a YesWeHack researcher cockpit, but the footprint is broader than advertised. Same-publisher install evidence reduces malware concern, yet stale install docs, unpinned multi-hop installation, browser-token use through an external CLI, arbitrary webhook delivery, and inclusion of report submission create medium-to-high security risk.