btcpay-server

SUSPICIOUS: the skill's purpose matches its BTCPay capabilities, and the npm install source is consistent with an official Membrane CLI. However, it routes BTCPay authentication and API traffic through a third-party Membrane service rather than directly to BTCPay's official API, which expands trust and data exposure beyond what the skill title suggests. This looks like a legitimate integration pattern with medium security risk, not confirmed malware.