intervals-to-freshbooks

SUSPICIOUS: the business purpose is coherent, and data appears intended for official FreshBooks endpoints, but the skill forwards credentials into unverifiable local shell scripts and performs autonomous external record creation plus local persistence. This is best classified as a high-risk vulnerable workflow rather than confirmed malware.