travelport

SUSPICIOUS. The skill’s stated purpose matches its operational steps, and the install source is an official npm package rather than a raw payload. However, the core integration is mediated by Membrane, a third-party proxy that handles authentication and API traffic instead of calling Travelport directly, creating meaningful credential-forwarding and data-flow risk that is somewhat disproportionate for a Travelport-specific skill.