clio

SUSPICIOUS: the skill is coherent with its stated Clio-integration purpose and uses a legitimate npm-distributed CLI, but it inserts Membrane as an intermediary for authentication and API access rather than talking directly to Clio. That third-party proxy/control-plane design raises medium security risk for sensitive legal data, though there is not enough evidence to call it malicious.