range

SUSPICIOUS. The skill’s stated purpose matches its Range-management capabilities, and the CLI install path is official npm rather than a raw payload. However, all authentication and API traffic are funneled through Membrane as an intermediary, and the skill relies on mutable external CLI execution with broad proxy/connector behavior. This looks coherent but introduces meaningful third-party trust and data-flow risk beyond a direct Range integration.