microsoft-power-bi

SUSPICIOUS: the skill is mostly coherent with its stated Power BI purpose and uses an official same-brand npm CLI, but it routes authentication and API traffic through Membrane rather than directly to Microsoft. That third-party proxy model is proportionate to the product but raises medium data-flow and credential-forwarding risk, especially with broad action execution and an unpinned global CLI install.