pp-seats-aero

SUSPICIOUS: the core read-only Seats.aero purpose is plausible, but the skill depends on a third-party wrapper ecosystem, forwards API credentials to that CLI, and includes arbitrary webhook/feedback posting paths. Nothing proves malware, yet publisher mismatch and indirect credential/data routing make the footprint broader than a narrowly scoped API query skill.