greenhouse-harvest

SUSPICIOUS: the skill’s purpose mostly matches its capabilities, but it is not a direct Greenhouse integration. It installs and depends on the Membrane CLI/service, routes API traffic through Membrane’s proxy, and relies on third-party credential handling. That is proportionate but expands trust and creates intermediary data-flow risk; the unpinned `@latest` install adds modest supply-chain risk.