lucca

SUSPICIOUS: the install path is mostly legitimate, but the skill's real footprint is a Membrane integration layer, not a direct Lucca integration. Lucca authentication and data are routed through Membrane's platform, which is a meaningful third-party intermediary and raises medium-high data-flow and credential-forwarding risk.