readme-com

SUSPICIOUS: the skill's high-level purpose matches Readme.com management, and the CLI install path is reasonably legitimate via npm, but the actual data flow is routed through Membrane rather than directly to Readme.com. Requiring a separate Membrane account and proxying authenticated API requests through a third-party intermediary is a meaningful trust and credential-handling concern, making this riskier than a normal first-party API integration.