retool

SUSPICIOUS. The skill is coherent as a Retool integration guide, and the npm install path appears official, so this is not confirmed malware. However, it routes authentication and API activity through Membrane rather than directly to Retool, expands scope to a broad third-party integration platform, and uses mutable `@latest` installs; those data-flow and trust choices make it medium risk for a narrowly described Retool skill.