Plop.js Code Generator

SUSPICIOUS due to transitive skill installation and only partially verified publisher trust, not because the stated Plop.js functionality is itself abnormal. The footprint is broadly aligned with a code-generation skill, but the install model loads remote skill instructions through third-party registries/repos, so overall risk is medium-high even without evidence of credential theft or malicious payloads.