time-tracker-by-ebillity

The skill’s core function is coherent, and the CLI install path appears legitimate, but the integration is mediated through Membrane rather than direct eBillity APIs. That makes this a third-party proxy/credential-forwarding design with moderate security risk and a suspicious data-flow mismatch, not confirmed malware.