groundlight

SUSPICIOUS. The skill is internally coherent and likely legitimate as a Membrane-hosted Groundlight integration, with official-registry installation and proportionate capabilities. However, it routes Groundlight authentication and data through Membrane rather than directly to Groundlight APIs, and uses mutable `@latest` CLI installs, so the trust and data-flow footprint is broader than a direct Groundlight skill.