workday-training

SUSPICIOUS. The install source is mostly legitimate, but the skill’s core purpose is to bypass or falsify Workday training/compliance completion by manipulating SCORM state inside an authenticated browser session. That capability is disproportionate and enables consequential account actions using broad browser-session access, even without explicit credential theft or external exfiltration.