asana

SUSPICIOUS: The skill's functionality matches Asana integration, but its auth and data flows are brokered through Maton rather than Asana's official API endpoints. That makes the main risk third-party credential delegation and API interception, not malware or installer abuse.