mati

SUSPICIOUS. The skill is broadly coherent for a Membrane-based Mati integration and uses an official npm-distributed CLI, so it is not clearly malicious. However, it materially expands trust and data flow to Membrane as an intermediary for Mati authentication and action execution, uses mutable latest-version installs, and supports dynamic server-side action generation; these make the skill medium risk and more trust-heavy than a direct Mati integration.