connectwise-psa

SUSPICIOUS. The skill is broadly aligned with its stated ConnectWise PSA integration purpose and uses an official npm package, but it routes authentication and API traffic through Membrane rather than directly to ConnectWise. That third-party mediation is disclosed and plausible, yet it increases trust and data-handling risk, especially with an unpinned CLI and proxy-based access to business records.