timely

SUSPICIOUS: the install source appears legitimate, but the skill's core design routes Timely access and OAuth through ClawLink rather than Timely directly. That intermediary credential and data flow is broader than necessary for a Timely skill and raises meaningful security risk even without evidence of confirmed malware.