code-engine-create

SUSPICIOUS. The workflow purpose is coherent for Domo Code Engine package creation, and the API/data flows mostly match that purpose, but the primary execution path relies on an unverifiable community CLI from a personal repo rather than an official Domo tool. Because that tool likely receives Domo credentials or auth context, the skill carries high supply-chain and credential-forwarding risk even without clear evidence of malicious intent.