cdata-software

SUSPICIOUS: the skill is not overtly malicious and uses an official npm-distributed CLI, but its actual footprint centers on routing CData access through Membrane as a third-party intermediary. That creates medium risk from data-flow indirection and unpinned CLI supply chain, even though credential handling is relatively restrained and no direct exfiltration pattern is shown.