liferay

SUSPICIOUS: the skill is coherent as a Liferay integration, but its real footprint is a Membrane integration that intermediates authentication, action discovery, and data operations through a third-party service. Install provenance is relatively acceptable via official npm/docs, so this is not malware, but the gateway-style data flow and mutable CLI execution make it higher risk than a direct Liferay skill.