keka

SUSPICIOUS: the install path is mostly legitimate, but the skill is internally inconsistent about what Keka is, links to mismatched official docs, and routes all access through Membrane as a third-party intermediary. The main concern is purpose/data-flow mismatch and delegated credential handling, not confirmed malware.