ashby

SUSPICIOUS: the skill’s purpose is coherent, but it overstates a third-party `ashby-cli` as an official path and forwards Ashby API keys plus candidate data through that intermediary. Registry-based install keeps this below malware, but the trust and credential-routing model creates medium security risk.