coterie-insurance

SUSPICIOUS. The skill's purpose and commands are mostly coherent, and the installer appears to be the official npm package for Membrane rather than an obviously rogue payload. However, the integration is not direct: it installs a third-party CLI and routes authenticated Coterie access through Membrane's proxy/service, which broadens the trust boundary and creates meaningful supply-chain and data-flow risk. This looks more like a legitimate but higher-trust integration wrapper than confirmed malware.