gameanalytics

SUSPICIOUS. The skill’s stated purpose matches its capabilities, and the CLI install path is a legitimate same-vendor npm package rather than an obviously malicious downloader. However, all GameAnalytics authentication and API traffic are intentionally routed through Membrane, a third-party intermediary, so credentials and analytics data are delegated to an external service instead of flowing directly to official GameAnalytics endpoints. That makes the skill coherent but trust-expanding, with moderate security risk rather than confirmed malware.