parser-expert

SUSPICIOUS: the skill's core purpose is coherent, and the CLI install path appears official and same-project aligned, so this is not strong evidence of malware. The main concern is data-flow integrity: it instructs the agent to use Membrane as a broker for Parser Expert instead of the official Parser Expert API, meaning user data and integration access transit a third-party control plane. That makes the skill medium risk despite otherwise plausible documentation.