crm-enrichment

SUSPICIOUS. The core CRM-enrichment behavior is mostly coherent and uses an official npm-published same-org CLI, so this is not confirmed malware. Risk comes from unpinned global CLI installation, forwarding CRM data and auth through Cargo's managed service, telemetry/session upsert, a transitive skill-install instruction, and an unrelated optional GitHub starring action that exceeds the stated purpose.