bluesky-by-unshape

SUSPICIOUS. The install source is relatively trustworthy and consistent with Membrane's published CLI, but the skill has notable purpose mismatch and routes authentication and app interactions through Membrane rather than direct Bluesky APIs. That proxy model may be legitimate for Membrane, yet it expands trust and data exposure beyond what the title suggests.