connect-apps

SUSPICIOUS: the skill’s purpose matches its capabilities, but it introduces a third-party control plane for many external accounts and enables autonomous real-world actions. The installer appears official and same-org, so this is not confirmed malware, but credential forwarding, intermediary data flows, and broad action scope make it high risk.