teller

SUSPICIOUS: the skill is coherent as a Membrane-based Teller integration, and the CLI install source appears legitimate, but all Teller authentication and data access are funneled through Membrane rather than directly to Teller. That third-party proxying is disclosed yet creates meaningful medium risk because the data is financial and the proxy can send arbitrary API requests.