streamtime

SUSPICIOUS: The skill's overall purpose aligns with Streamtime management, and the Membrane CLI appears to be an official same-org tool, so this is not confirmed malware. However, it introduces medium security risk through mutable npx @latest execution, local credential storage, and routing authenticated requests through Membrane's intermediary proxy rather than directly to Streamtime; the arbitrary full-URL request capability further broadens data-flow risk.