balena

SUSPICIOUS. The skill's capabilities broadly match its Balena integration purpose, and install instructions use an official npm package rather than a hidden payload. However, all Balena access is funneled through Membrane-managed auth and proxy infrastructure, creating a third-party credential and data path that is broader than a direct Balena integration and raises medium security risk.