mailchimp

SUSPICIOUS: the skill's purpose is coherent, but it routes Mailchimp authentication and API traffic through a third-party Membrane CLI/service instead of Mailchimp's direct API. The install source is legitimate npm rather than an unverifiable binary, so this is not confirmed malware, but the intermediary credential/data flow and mutable `@latest` install make the skill medium risk.