imagekitio

SUSPICIOUS: The skill's purpose and capabilities are mostly aligned, and the CLI comes from an official npm package rather than an opaque downloader. The main concern is architectural: all ImageKit access and auth are funneled through the third-party Membrane CLI/service, creating indirect credential and data flows plus broad proxy capability. This is not clearly malicious, but it is higher trust than a direct ImageKit integration and carries medium security risk.