thena

SUSPICIOUS: the skill is broadly aligned with its stated purpose, but its actual footprint is an intermediary-platform skill more than a direct Thena integration. Installing and trusting the Membrane CLI plus routing authentication, action creation, and data operations through Membrane is a meaningful third-party trust and data-flow expansion; the unpinned `@latest` install adds supply-chain risk. No clear evidence of malware, credential theft, stealth, or obviously incompatible behavior was found.