billy

SUSPICIOUS: the skill is internally coherent as a Membrane-based Billy connector, but it routes authentication and Billy data through a third-party intermediary rather than Billy's official API, and it relies on an unpinned external CLI plus dynamic remote action creation. This is more of a platform/gateway skill than a direct Billy integration, so the main concern is data-flow and trust expansion, not confirmed malware.