bluecart-api

SUSPICIOUS. The install path is relatively trustworthy and consistent with Membrane's official npm-based CLI distribution, so this is not a malware-style download-execute lure. However, the skill's real footprint is broader than a plain BlueCart integration because all auth and API traffic are mediated by Membrane, and the documentation has notable inconsistencies (wrong docs URL, Walmart references) that reduce confidence in scope accuracy.