onetrust

SUSPICIOUS: the skill is broadly coherent as a OneTrust integration, and its install path is same-org and official. The main concern is data-flow integrity: it funnels OneTrust access through Membrane's intermediary service and proxy, expanding the trust boundary beyond OneTrust itself. This is not confirmed malware, but it carries medium security risk due to third-party credential/data mediation and broad proxy capability.