snowplow-analytics

SUSPICIOUS: The skill’s stated purpose is Snowplow integration, but it routes authentication and data access through Membrane as an intermediary rather than official Snowplow APIs. The CLI source appears same-vendor and official, so this is not strong malware evidence, but the third-party credential/data mediation and unpinned global install create meaningful security risk.