datawrapper

SUSPICIOUS: the skill's purpose and commands are broadly coherent, and the CLI install source appears legitimate, but the actual data flow is not direct to Datawrapper. The skill requires users to trust Membrane as a credential- and request-mediating third party, including proxying API calls, which is a meaningful integrity and privacy risk even without clear evidence of malicious intent.