workday

SUSPICIOUS: The skill is broadly coherent as a Workday integration and uses an official npm-distributed CLI tied to the same publisher, so it is not malware-like. The main concern is data-flow integrity: all Workday access is mediated through Membrane, a third-party platform that stores/manages credentials and proxies sensitive enterprise data, plus the install is unpinned and the description overstates scope.