lmnt

SUSPICIOUS: the main issue is internal inconsistency and indirect data flow. The skill claims to be an LMNT integration but its entity model does not match the referenced LMNT product, and all authenticated traffic is routed through Membrane's proxy rather than directly to official LMNT APIs. The npm-based CLI install is relatively normal, so this is not confirmed malware, but the purpose mismatch plus credential mediation make the skill risky to trust as described.