mctime

SUSPICIOUS: the skill is coherent as a Membrane-based McTime integration, and the CLI install source is reasonably legitimate, but it routes authentication and McTime data through Membrane rather than directly to McTime. The main risk is third-party mediation of credentials and business data plus an unpinned CLI install, not confirmed malware.