prisma

SUSPICIOUS: the skill's stated Prisma purpose is only partially aligned with its actual footprint because all access is mediated by Membrane, a separate third-party CLI/service that stores tokens locally and proxies requests instead of using Prisma's official direct API path. The install source is relatively trustworthy (official npm package), so this is not confirmed malware, but the intermediary data flow and broadened trust boundary make the skill medium risk.