docmosis

SUSPICIOUS: the skill’s install path is reasonably legitimate, but its actual footprint is broader than a Docmosis integration because it requires a separate Membrane account, installs a third-party CLI, and routes Docmosis authentication and data through Membrane rather than official Docmosis APIs. This looks more like a Membrane gateway skill than a direct Docmosis skill, creating medium security risk from intermediary trust and credential/data forwarding.