dart

SUSPICIOUS: the install path is relatively legitimate and same-vendor, but the skill is internally inconsistent about what "Dart" actually is and routes all auth/data/actions through Membrane as an intermediary. This looks more like a generic Membrane connector wrapper than a clearly scoped Dart skill; medium risk comes from purpose mismatch, third-party credential/data mediation, and mutable CLI installation rather than confirmed malware.