mux

SUSPICIOUS: the skill's purpose and capabilities are mostly aligned, and the install path is a normal npm-based CLI install rather than an overt malware pattern. The main concern is data-flow integrity: Mux access is mediated by Membrane, a third-party proxy/connector layer not shown as an official Mux integration path, so credentials and API traffic are delegated outside Mux's direct API model.