lexer

SUSPICIOUS: the install path is relatively trustworthy and there is no obvious malware pattern, but the skill's stated purpose is badly misaligned with its actual Membrane connector behavior. The main risk is misleading purpose plus third-party proxy routing of authenticated requests through Membrane rather than a clearly identified official Lexer API.