life-sciences-kam-coordinate

SUSPICIOUS. The skill’s capabilities broadly match its stated Salesforce setup purpose, and data flows stay within Salesforce/GitHub rather than unknown intermediaries. However, it grants an agent broad real-world admin actions, includes silent cleanup, and relies on an unpinned GitHub source checkout, making it higher-risk than a normal documentation/orchestration skill even without clear malware behavior.