cross-river

SUSPICIOUS. The skill is internally consistent as a Membrane-based Cross River integration and uses an official npm-distributed CLI from the same publisher, so this is not confirmed malware. However, it routes authentication, credential management, and API access through Membrane rather than directly to Cross River, creating meaningful third-party data and credential handling risk; the mutable `@latest` install adds minor supply-chain risk.