jamroom

SUSPICIOUS: The skill is internally consistent as a Membrane-hosted Jamroom integration and uses an official npm-distributed CLI, so it does not look malicious. However, it broadens the trust boundary by routing Jamroom authentication, data access, and admin actions through Membrane’s intermediary service, and it exposes high-impact actions including messaging, email, installs, and configuration changes. Medium security risk; low malware evidence.