knowbe4

SUSPICIOUS: the skill's user-facing purpose is KnowBe4 management, but its real data flow depends on Membrane as a third-party control plane and proxy for authentication and API traffic. The install path is relatively legitimate, yet the intermediary routing and server-side credential handling are not fully proportionate to a simple KnowBe4 integration and create meaningful data-flow risk.