salesforce-automation

SUSPICIOUS: the skill’s CRM capabilities match its stated purpose, but it routes Salesforce access through a third-party MCP service and references a Rube endpoint that official sources indicate is deprecated/shut down. This is not confirmed malware, but the install/trust story is inconsistent and the intermediary data flow increases security risk.