clari

SUSPICIOUS. The core capability matches a Clari integration, and the CLI install source appears legitimate, but the skill routes authentication, API traffic, and returned Clari data through Membrane rather than direct Clari endpoints. That third-party proxy architecture is disproportionate for a plain Clari skill and creates meaningful credential/data-flow trust concerns even without clear evidence of malware.