samsara

SUSPICIOUS: the skill's purpose matches a Samsara integration, and the npm-hosted Membrane CLI install is not inherently malicious. However, the core data flow is through Membrane as a third-party intermediary rather than directly to Samsara's official API, so credentials and business data are entrusted to an external integration platform; this is a meaningful integrity and privacy risk, though not clear malware.