cohesivity

SUSPICIOUS. The skill is internally coherent as a backend/gateway integration, but it has a broad operational footprint: local secret-file reading, remote installer execution, infrastructure provisioning, and centralized routing of application/provider data through Cohesivity. Same-org domains and explicit consent gates weigh against outright maliciousness, but the combination of supply-chain risk, credential handling, and intermediary data flows makes it medium-to-high security risk.