cliniko

SUSPICIOUS: the skill is internally coherent for Membrane’s platform, and the CLI install source appears legitimate, but the actual footprint is broader than a plain Cliniko integration because all authentication and API traffic are mediated by Membrane. For healthcare data, that third-party proxying and account dependency are significant scope and data-flow risks, though not strong evidence of malware.