typeform

SUSPICIOUS. The skill's Typeform-related capabilities match its stated purpose, and there is no download-execute or unverifiable binary behavior. However, it requires users to trust a third-party managed gateway and control plane with their Maton API key and proxied Typeform access rather than using Typeform's native direct API flow; that mediation is the main risk and should be explicit.