sesamehr

SUSPICIOUS. The skill is internally consistent and uses official Apideck infrastructure, so it is not malicious or a supply-chain lure. However, it deliberately routes Sesame HR credentials and API traffic through Apideck as a third-party proxy/Vault, which is a real medium security risk and should only be used when that intermediary trust model is explicitly acceptable.