api-sports

SUSPICIOUS. The install source is legitimate and not overtly malicious, but the skill's real footprint depends on a third-party Membrane CLI and proxy that intermediates authentication and API traffic for API-Sports. That data-flow indirection is broader than the stated purpose and creates medium trust and credential-handling risk, though there is no confirmed malware or obfuscation.