basecamp-connect

SUSPICIOUS: the skill is purpose-aligned and uses same-org/official components, but it grants a local agent significant autonomous posting and workflow power triggered from external Basecamp/GitHub events via public webhook exposure. Config-file access itself is benign, and there is no clear credential exfiltration, but the autonomy and transitive-trust footprint make this a medium-high risk workflow skill rather than a benign low-risk helper.