txt-werk

SUSPICIOUS: the skill's basic function is coherent, and the CLI install path is official npm-based, but the integration depends on a third-party Membrane intermediary for auth and data operations rather than clearly documented TXT Werk first-party endpoints. That mismatch and the weak TXT Werk documentation evidence create moderate trust and data-flow concerns, though not enough to indicate confirmed malware.