google-vertex-ai

SUSPICIOUS: The skill’s purpose and capabilities mostly align, and the CLI comes from an official registry, but all Vertex AI access and credential handling are routed through Membrane rather than directly to Google. This is a coherent integration pattern, not confirmed malware, but it creates meaningful third-party trust and data-routing risk beyond a direct Google client.