partnerstack

SUSPICIOUS: the skill is internally coherent as a Membrane-based PartnerStack connector, and the CLI install source appears legitimate, but the actual integration is mediated by Membrane rather than PartnerStack's official API. That third-party routing of authentication and data makes the skill higher risk than a direct API skill, though there is no clear evidence of overt malware or credential theft.