gift-up

SUSPICIOUS: The skill’s core purpose is coherent, and the Membrane CLI install path appears legitimate. However, the integration routes authentication and API traffic through Membrane as a third-party intermediary and enables high-impact business actions, creating medium security risk despite low evidence of malware.