ifood

SUSPICIOUS. The skill's core capability fits its stated iFood integration purpose, and the Membrane CLI appears to be an official same-org npm tool rather than an unverifiable binary. The main concern is data-flow integrity: instead of calling iFood APIs directly, the skill routes authentication and API requests through Membrane's intermediary service/proxy, which broadens trust and exposes request data to a third party. Combined with unpinned `@latest` installs and broad CRUD/proxy capability, this is medium risk but not confirmed malicious.