restack

SUSPICIOUS. The install source is coherent and likely first-party, but the skill’s stated purpose is narrower than its actual trust model: a Restack skill that requires a Membrane account and sends authentication, action definitions, inputs, and outputs through Membrane as an intermediary. This is not confirmed malicious, but the third-party credential/data routing and dynamic action generation make it higher risk than a direct official Restack integration.