monday-automation

SUSPICIOUS: The skill’s Monday automation scope is coherent, but trust and data flow are weakened by reliance on a third-party MCP broker and outdated Rube setup instructions. No malware or payload behavior is present, yet the indirect OAuth/data path and broad write actions make this a medium-risk skill rather than benign.