salesforce

SUSPICIOUS. The skill’s CRM capabilities match its stated purpose, and the CLI install source appears to be the publisher’s official npm package. However, the integration is not direct: it requires a Membrane account and routes Salesforce authentication and API traffic through Membrane’s intermediary platform and proxy. That third-party credential forwarding and data-path expansion are proportionate to Membrane’s product model but materially increase trust and privacy risk versus a direct Salesforce skill.