werkbonapp

SUSPICIOUS: The skill's overall purpose is coherent, and the CLI install source appears legitimate, so this is not malware-like. However, all authentication and API traffic are funneled through Membrane rather than directly to WerkbonApp, and the skill executes an unpinned external CLI with broad proxy capability, making the data-flow and trust model moderately risky for the stated integration purpose.