geckoboard

SUSPICIOUS: The skill is mostly coherent with its Geckoboard-management purpose and uses an official npm package, but it routes authentication and API activity through Membrane rather than directly to Geckoboard. That intermediary trust model and unpinned global CLI install raise moderate security risk, though there is not enough evidence to call it malicious.