hootsuite

SUSPICIOUS: the skill is coherent with Membrane's product model, and the CLI install source appears legitimate, but it materially expands trust by routing Hootsuite authentication and API traffic through Membrane rather than official Hootsuite endpoints directly. This is not confirmed malware, but it is a medium-risk third-party proxy/credential-handling pattern that users should explicitly understand before use.