mailchimp

SUSPICIOUS: the skill's capabilities fit its Mailchimp purpose and it does not use risky installers, but its core design proxies all Mailchimp API traffic and managed OAuth through Maton rather than using Mailchimp's official endpoints directly. That third-party interception of credentials and marketing data is a material integrity and privacy risk, though not confirmed malware.