pay-with-bolt

SUSPICIOUS: the skill is coherent with its stated Bolt-integration purpose and uses a likely official CLI from npm, but it routes authentication and API traffic through Membrane's intermediary platform instead of directly to Bolt. That makes it a higher-trust, medium-risk integration rather than clearly malicious.