cobalt

SUSPICIOUS: the skill’s actual footprint is not fully consistent with its stated purpose. The install path is relatively normal (official npm package), but the skill routes authenticated Cobalt access through Membrane and the listed actions describe a different product domain than the support-ticket narrative. That combination makes the integration internally inconsistent and medium-high risk, though not confirmed malware.