clickhelp

SUSPICIOUS: the skill is internally coherent as a Membrane-based ClickHelp integration, and its CLI install path is same-org and registry-based rather than a stealth payload. However, it routes ClickHelp authentication and data through Membrane as an intermediary, widening the trust boundary and enabling significant write actions; this is not clearly malicious, but it is a medium-risk third-party gateway pattern.