cli-anything-firefly-iii

SUSPICIOUS: The skill's capabilities and credential scope generally match a Firefly III finance CLI, and data appears to flow to the user-configured Firefly III instance rather than a third-party proxy. The main concern is install trust: the unpinned pip package name is not the same as the publisher's documented same-org installation path, so provenance is inconsistent and only partially verifiable. Not malicious on the evidence provided, but medium risk due to supply-chain ambiguity plus broad finance-modifying capabilities.