amazon-api-gateway

This skill's instructions and capabilities are internally consistent with its stated purpose: it integrates Amazon API Gateway via the Membrane managed connector and CLI. There is no evidence of obfuscated code, direct credential-harvesting scripts, curl|bash download-execute tricks, or hardcoded secrets in the provided text. The primary security consideration is trust in the Membrane service: authentication tokens, request payloads, and responses are proxied through Membrane, so sensitive data and credential-bearing requests are visible to that third party. Installing the @membranehq/cli is a standard npm install step but introduces typical supply-chain risk associated with third-party CLI tools. Overall, this skill is functionally benign for its purpose but requires user trust in Membrane's security and privacy practices.