ukg-pro-workforce-management

SUSPICIOUS: the skill is coherent in purpose, and its CLI install source is relatively trustworthy, but it routes UKG authentication and API traffic through Membrane rather than directly to UKG. That intermediary credential/data flow is a meaningful risk and broader than a typical direct-service integration, though not enough to indicate confirmed malware.