assembla

SUSPICIOUS. The skill is broadly aligned with its stated purpose, and the CLI comes from an official registry, so it is not overtly malicious. The main risk is that all Assembla access and credentials are mediated by Membrane rather than going directly to official Assembla endpoints, creating a third-party credential and data-routing dependency with unpinned CLI execution and dynamically generated actions.