astronomer

SUSPICIOUS: The skill's capabilities broadly match its purpose, and the Membrane CLI appears to be an official same-vendor tool from npm rather than an obvious malicious payload. However, the integration depends on a third-party broker (Membrane) for authentication and API access to Astronomer, uses mutable install versions, and exposes a broad proxy request path that can perform arbitrary actions through the connection. This is not confirmed malware, but it carries meaningful trust and data-flow risk beyond a direct official Astronomer integration.