dineway-tools

SUSPICIOUS: the skill’s purpose matches its broad external-data capabilities, and the npm install path looks ordinary, but the core design routes API activity, artifacts, and credential-dependent execution through the Dineway/Forgeway intermediary rather than directly to official provider endpoints. That brokered data flow and large credential surface make it medium risk even without confirmed malware.