sofort

SUSPICIOUS: the skill is internally coherent as a Membrane-hosted SOFORT connector, and the CLI install source looks legitimate, but the actual data path is a third-party proxy/service rather than direct SOFORT API access. That intermediary routing creates medium security risk and should be treated as trust in Membrane, not a pure first-party SOFORT integration.