shotstack

SUSPICIOUS: the install path is mostly legitimate and same-ecosystem, but the skill is internally inconsistent and routes Shotstack access through Membrane as a third-party intermediary. The main issue is purpose-capability mismatch plus broader-than-necessary data flow, not confirmed malware.