nhanh

SUSPICIOUS: the skill’s purpose and commands are mostly coherent, and the installer appears official, but all authentication and data access are funneled through Membrane rather than directly to Nhanh. That third-party credential/data mediation plus unpinned CLI execution creates meaningful trust and security risk, though not strong evidence of malware.