localstack

SUSPICIOUS: the skill's purpose broadly matches LocalStack management, and installation uses an official npm package, so this is not clearly malicious. However, it requires a Membrane account and routes LocalStack access through Membrane as an intermediary, which is a notable data-flow and credential-delegation expansion for a tool described as interacting with LocalStack data.