workamajig

SUSPICIOUS: The skill is coherent as a Membrane-based connector, and the CLI install source is legitimate, but its actual footprint is broader than a direct Workamajig integration because all auth and data access are delegated through Membrane's third-party service. That intermediary data flow and server-side credential handling raise medium risk even without clear malware indicators.