sendblue

SUSPICIOUS: The skill's purpose aligns with Sendblue integration, and the install path uses a real npm package rather than an opaque binary. However, it routes authentication and API traffic through Membrane instead of Sendblue's official direct API, expanding trust and data exposure to a third-party intermediary; combined with mutable @latest installation, this makes it medium risk rather than benign.