mautic

The skill is coherently scoped as a Mautic integration via the Membrane platform, leveraging Membrane’s authentication and proxying to perform standard Mautic operations. Install and data flow patterns are consistent with the described purpose, with credentials being managed server-side by Membrane rather than locally by the skill. No unverifiable binaries or direct credential exfiltration are evident. Overall, the risk is moderate (securityRisk around 0.25–0.45) and the approach is benign if Membrane’s security guarantees are maintained. Recommend monitoring for any future extension that introduces local credential storage or direct API calls outside Membrane’s proxy layer.