bitwarden

SUSPICIOUS: the skill's general purpose matches Bitwarden management, and the install source is a legitimate npm package tied to the same Membrane ecosystem. But it proxies password-manager access and credential lifecycle through Membrane rather than using Bitwarden directly, which is a disproportionate trust expansion for highly sensitive vault data; combined with unpinned CLI installs, this makes the skill medium risk rather than benign.