ocr-web-service

SUSPICIOUS: The skill is mostly coherent for an OCR integration and uses an official npm-distributed Membrane CLI, so this is not strong evidence of malware. However, all authentication and API traffic are routed through Membrane rather than directly to OCR Web Service, creating a meaningful intermediary trust and data-flow risk; the proxy feature and mutable @latest execution increase security risk beyond a simple documentation skill.