flutterwave

SUSPICIOUS. The skill's capabilities broadly match its Flutterwave-integration purpose, and the CLI comes from an official npm package rather than an obviously malicious installer. However, all authentication and API traffic are routed through Membrane, a third-party intermediary rather than direct Flutterwave endpoints, and the skill enables high-impact financial actions. This is not confirmed malware, but it is medium risk due to credential/data mediation and autonomy over payment operations.