calendly

SUSPICIOUS: The skill's capabilities match Calendly integration, and there is no installer or executable payload. However, all authentication and API traffic are routed through Maton proxy/control domains instead of Calendly's official API, so the skill requires trusting a third-party intermediary with sensitive scheduling data and delegated account access. Risk is medium: coherent purpose, but non-official data flow and transitive skill referral materially increase trust and privacy concerns.