airbyte

SUSPICIOUS. The skill’s actions fit its stated Airbyte integration purpose, and the install source is a legitimate npm package from the Membrane publisher. However, the skill routes authentication and API access through Membrane instead of directly to Airbyte, creating a third-party credential and data mediation layer that is broader than a direct Airbyte integration. Main risk is intermediary trust and unpinned CLI installation, not confirmed malware.