kiotviet

SUSPICIOUS: the skill is coherent in purpose, but its actual footprint is materially broader than a direct KiotViet integration because authentication, credential refresh, and API traffic are routed through Membrane. The npm-based CLI install is relatively normal, but the third-party proxy model and broad write-capable actions create medium security risk rather than clear malware evidence.