teamcity

SUSPICIOUS: the skill’s core purpose is coherent, and the CLI install path is relatively legitimate via npm, but the integration is mediated by Membrane rather than direct TeamCity APIs. That third-party credential and data proxying is a meaningful trust expansion and makes the data flow less proportionate than a direct TeamCity skill, though not enough to call it malicious.