mesibo

SUSPICIOUS: the skill is coherent as a Membrane-powered connector, but not as a direct Mesibo integration. Install sources are same-org and documented, so this is not strong malware evidence; however, the skill requires a separate Membrane account, runs mutable CLI versions, and routes Mesibo access through a third-party intermediary instead of official Mesibo APIs, creating moderate trust and data-flow risk.