zapier-workflows

SUSPICIOUS: The core behavior mostly matches the stated purpose and uses official Zapier endpoints, so this is not confirmed malware. But the skill normalizes storing webhook secrets in plain text, instructs token-bearing terminal setup outside the current official auth flow, and relies on a personal GitHub repo for distribution/reset, creating meaningful install-trust and credential-handling risk.