bright-security

SUSPICIOUS: the skill is internally coherent as a Membrane-based Bright Security integration, and its CLI comes from an official registry with same-vendor provenance. However, it routes Bright authentication and API traffic through Membrane rather than directly to Bright, creating a meaningful third-party credential and data intermediary risk. This is not confirmed malware, but it is a medium-risk integration due to credential forwarding, proxying, and unpinned CLI installation.