albato

SUSPICIOUS: the skill is internally coherent for a Membrane-published integration, and the CLI install path is reasonably legitimate, but the actual footprint is broader than a direct Albato skill because all authentication, action creation, and data exchange are routed through Membrane as an intermediary. The main risk is third-party credential/data mediation plus mutable `@latest` CLI installation, not confirmed malware.