lemon-squeezy

SUSPICIOUS: The skill's purpose is coherent, and the npm-installed CLI appears to come from an official package scope, so this is not overtly malicious. However, the integration routes Lemon Squeezy authentication and API traffic through Membrane instead of directly to Lemon Squeezy, creating a disproportionate third-party trust boundary and moderate data-flow risk.