snov

SUSPICIOUS: The skill is internally coherent for a Membrane-based Snov integration and uses an official npm package, so it is not overtly malicious. However, it proxies Snov API traffic and delegated auth through Membrane rather than direct official Snov endpoints, adding meaningful third-party trust and data-flow risk beyond a simple direct integration.