appsmith

SUSPICIOUS. The installer provenance is relatively normal for a developer CLI, but the skill's actual integration path is not direct Appsmith access: it requires a third-party Membrane service to broker authentication and proxy API calls. That data-flow mismatch makes the skill moderately risky even without clear malware indicators.