truefoundry-integrate-gateway

SUSPICIOUS. The skill’s purpose broadly matches its deep repo scanning and TrueFoundry API usage, and the official tfy CLI appears legitimate. Risk is elevated because it reads raw credential files, handles sensitive env/config data, and executes an undocumented local helper tfy-api.sh that may receive authenticated API requests; that unverifiable intermediary makes the overall footprint higher risk than a normal integration guide.