hastyai

SUSPICIOUS: the skill is mostly coherent as a Hasty.ai integration, but it routes authentication and API traffic through Membrane instead of using official Hasty.ai endpoints directly. The npm-installed CLI appears legitimate, so this is not confirmed malware; the main concern is intermediary trust, added account scope, and unpinned CLI usage.