scaledrone

SUSPICIOUS: the skill is purpose-aligned and uses an official Membrane CLI, but it routes Scaledrone authentication and API traffic through Membrane rather than directly to Scaledrone. The main risks are third-party credential/data mediation and unpinned npm/npx execution, not confirmed malware.