cirrus-labs

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the CLI install source is a legitimate npm package rather than an unverifiable binary. The main concern is data-flow integrity: Cirrus access and credentials are mediated by Membrane instead of going directly to Cirrus’s official API, creating third-party credential/data forwarding that is documented but broader than a direct service integration.