fountain

SUSPICIOUS: the skill is not overt malware, but its stated Fountain purpose is poorly aligned with the actual footprint. It installs and relies on a third-party CLI, routes auth and API traffic through Membrane instead of clear official Fountain endpoints, and can dynamically create connectors, making the trust and data flow broader than the skill description suggests.