monday-automation

SUSPICIOUS: The skill's purpose aligns with Monday automation and it avoids obvious malware patterns, but it routes OAuth and all API activity through a third-party hosted MCP service with only partially verified canonical endpoint documentation. The broad raw GraphQL capability and intermediary token custody make this higher-risk than a direct first-party Monday integration.