banked

SUSPICIOUS: The skill's capabilities broadly match its purpose, and the CLI comes from a legitimate npm package rather than a raw installer. However, all Banked access and authentication are funneled through Membrane as a third-party intermediary, creating medium data-flow and trust-boundary risk, compounded by unpinned @latest installs.