asana

SUSPICIOUS. The business purpose is coherent, and the runtime actions look like normal Asana MCP operations, but the install and auth trust chain is not. The key concern is not Asana access itself; it is dependence on an unverified local `asana` CLI plus a third-party skill installer and undocumented Muse/authd/CAGI credential-handling path. This is a medium-high security risk from supply-chain and credential-forwarding uncertainty rather than confirmed malware.