opencage

SUSPICIOUS. The install path is relatively normal and registry-backed, but the skill is internally inconsistent: its metadata describes CRM capabilities unrelated to OpenCage, and it routes API activity through Membrane instead of using OpenCage's native direct API flow. This looks more like a generic Membrane integration template than a tightly scoped OpenCage skill, creating medium security risk through unnecessary intermediary trust and misleading capability claims.