canny

SUSPICIOUS: The skill’s capabilities broadly match its stated Canny-integration purpose, and the install source appears legitimate. The main risk is data-flow integrity: Canny access is mediated through Membrane’s CLI/service and proxy, so credentials and API traffic are entrusted to an intermediary platform rather than going directly to Canny.