integrate-anything

SUSPICIOUS: the skill is internally consistent and appears first-party to Membrane, with official npm/docs/API alignment and no obvious hidden installer or exfiltration endpoint. However, its entire purpose is to route credentials, prompts, action inputs, and external-app operations through Membrane as a third-party intermediary, creating meaningful trust and data-handling risk even though that behavior is clearly disclosed.