abuselpdb

SUSPICIOUS: The skill is broadly coherent with its purpose, and the CLI install path appears to be same-vendor and legitimate. However, it routes AbuseIPDB access and credentials through Membrane rather than directly to official AbuseIPDB endpoints, creating a meaningful intermediary trust and credential-forwarding risk; combined with unpinned CLI install and dynamic remote actions, this is medium security risk but not confirmed malware.