sidekick-ai

SUSPICIOUS. The skill’s functionality mostly matches its stated purpose, and the CLI comes from the official npm registry rather than an unverifiable binary. However, all Sidekick access and credential handling are mediated by Membrane, a third-party integration layer, and the skill encourages broad proxy access plus unpinned CLI execution. This is more a trust-boundary and credential-forwarding risk than confirmed malware.