scrapeninja

SUSPICIOUS: The skill's purpose broadly matches its behavior, but it requires users to trust Membrane as a full intermediary for authentication and API traffic rather than using ScrapeNinja's direct documented API pattern. The npm install source is legitimate, so this is not confirmed malware, but the third-party credential/data routing and mutable global CLI install raise medium risk.