freshsales

SUSPICIOUS. The install path is relatively legitimate, but the skill’s real data flow is a third-party Membrane man-in-the-middle for Freshsales authentication and API access. That proxy model is broader than a direct Freshsales integration and creates meaningful credential and data-handling risk, though there is not enough evidence here to call it malware.