outreach

SUSPICIOUS: the skill’s purpose is coherent, and the npm-installed CLI appears to be a legitimate same-brand tool, so this is not malware. The main concern is data-flow integrity: all Outreach operations and auth are mediated by Membrane rather than going directly to official Outreach endpoints, which adds a third-party trust boundary and moderate security risk.