outfit

SUSPICIOUS. The install source is legitimate and consistent with the stated workflow, but the skill's actual integration path depends on Membrane as an intermediary for authentication, credential refresh, and API proxying instead of calling Outfit directly. That extra trust layer is broader than a simple Outfit skill and creates meaningful credential/data-flow risk, though not strong evidence of malware.