shuttle

SUSPICIOUS. The install path is relatively normal, but the skill's core design routes Shuttle authentication and API calls through Membrane, a third-party intermediary, rather than using Shuttle's official direct API/auth flow. That creates a meaningful data-flow and credential-forwarding concern that is only partially aligned with the stated purpose of a Shuttle integration.