miro

SUSPICIOUS. The skill’s capabilities fit its stated Miro-integration purpose, and the npm package appears tied to the ClawLink publisher, but the core model routes authentication and Miro operations through ClawLink as an intermediary. That third-party credential and data handling is a notable trust expansion beyond a normal direct Miro integration, so the skill is coherent but medium-high risk rather than benign.