microsoft-power-bi

SUSPICIOUS: the skill's purpose matches Power BI management, and the npm install path appears legitimate, but the actual data flow routes authentication and API access through third-party Membrane instead of directly to Microsoft. This is not confirmed malware, but it is a medium-risk intermediary/proxy design with moderate supply-chain and credential-handling concerns.