oracle-fusion-recruiting-cloud

SUSPICIOUS. The skill's capabilities fit its stated Oracle Recruiting integration purpose, and the CLI install path is consistent with Membrane's official distribution. The main risk is data-flow integrity: Oracle credentials and API traffic are mediated by Membrane's third-party connection/proxy layer rather than going directly to Oracle, plus the docs include unpinned `npx @latest` execution. This is not clearly malicious, but it meaningfully expands trust and data exposure beyond what the title alone suggests.