smartsheet

SUSPICIOUS: The skill's basic purpose is coherent, and the CLI install path appears legitimate, but the core data flow is routed through Membrane rather than directly to Smartsheet. Requiring a Membrane account, handling Smartsheet auth server-side, and dynamically creating actions make the footprint broader than a typical service-specific integration and introduce medium security risk without clear evidence of malware.