root-cause

SUSPICIOUS: The skill’s purpose is coherent, but it routes Gorgias ticket access through the third-party Composio CLI/service instead of direct first-party APIs, adding intermediary data exposure and transitive trust. The installer provenance appears same-org and public, so this is not confirmed malware, but the external CLI and indirect data flow make it medium risk.