webscraperio

SUSPICIOUS. The skill's purpose is coherent, and the CLI install path is an official npm package rather than an obvious malware delivery vector. However, the integration routes authentication and API traffic through Membrane as an intermediary instead of using WebScraper.IO's official direct API flow, so credentials and data are delegated to a third-party platform. This is a trust and data-flow concern rather than confirmed malware.