melissa-data

SUSPICIOUS: the skill is coherent with its stated Melissa Data purpose and uses an official same-brand CLI, but it routes authentication and API traffic through Membrane as an intermediary rather than directly to Melissa. That makes the install path mostly benign while leaving medium security risk from credential delegation and proxy-based data flow.