prestashop

SUSPICIOUS: the overall workflow fits an integration skill, and the CLI source appears legitimate, but the skill routes PrestaShop authentication and API traffic through Membrane instead of direct official PrestaShop endpoints. That third-party credential/data mediation is a meaningful trust and data-flow concern, amplified by mutable CLI versions and an inconsistent Mixpanel example, though there is no clear evidence of outright malware.