affinity

SUSPICIOUS: the skill's purpose is coherent, but it routes Affinity access, credentials, and CRM data through ClawLink as an intermediary rather than using official direct Affinity auth/API flows. The npm-delivered CLI appears same-brand and publicly documented, so this is not confirmed malware, but the third-party credential holding and data mediation make the security risk medium-high.