deel

SUSPICIOUS: the skill is internally coherent as a Membrane-based Deel wrapper, and its installer is from an official registry, but it routes authentication and sensitive Deel HR/payroll operations through Membrane instead of Deel’s official API endpoints. That intermediary data flow and credential delegation elevate risk even without clear malware indicators.