jfb-action-external-api

SUSPICIOUS. The skill is internally consistent as a developer guide for JetFormBuilder external API actions, with no malicious installer or hidden execution behavior. However, its core purpose is to transmit form data and stored API credentials to arbitrary third-party endpoints, including sensitive integrations like CRMs, LLMs, webhooks, and payment processors, so the security risk is medium even though the content itself appears benign.