google-maps

SUSPICIOUS: The skill's purpose is plausible, and the npm install path appears official for Membrane, so this is not confirmed malware. However, it is not a direct Google Maps integration: it requires a third-party CLI and routes authentication and API traffic through Membrane, which is disproportionate to a skill presented as 'Google Maps integration' and creates meaningful intermediary trust and data-flow risk.