bland-ai

SUSPICIOUS: the skill's basic function is coherent, and its CLI comes from an official npm package, but it unnecessarily intermediates Bland AI access through Membrane and contains a false claim that Bland lacks public documentation. This is not confirmed malware, but the third-party proxy/auth model and misleading service description create medium security risk.