spotlightr

SUSPICIOUS: the install path is relatively coherent, but the skill's core design routes Spotlightr authentication and API traffic through Membrane rather than directly to Spotlightr. That third-party gateway model is broader than the stated single-service integration and creates meaningful credential and data-flow risk without clear necessity.