gigalixir

SUSPICIOUS. The skill is coherent as a Membrane-powered Gigalixir integration, and the CLI install source is official npm rather than an unverifiable binary. However, the actual data flow is not direct Gigalixir access: authentication, credential management, and API requests are routed through Membrane's third-party platform and CLI. That intermediary design is proportionate to the publisher's stated product model, but it introduces medium security risk and makes the skill meaningfully broader than a simple Gigalixir connector.