simplesat

SUSPICIOUS: the skill's purpose is coherent, and the CLI install path is reasonably trustworthy via npm, but the integration routes authenticated Simplesat access through Membrane as a third-party intermediary rather than directly to Simplesat's official API. That makes it higher-risk than a direct SaaS integration, though not clearly malicious.