botanalytics

SUSPICIOUS: The skill’s purpose and capabilities are mostly aligned, and the install source is the official npm registry rather than a raw download. However, it routes Botanalytics authentication and data through Membrane as an intermediary, uses a mutable third-party CLI install, and grants that CLI broad integration authority. This is a coherent integration skill, but its trust model is materially broader than a direct Botanalytics client, so the overall risk is medium rather than benign.