upviral

SUSPICIOUS: the skill is broadly coherent for an UpViral integration, and its CLI install path appears to be the official Membrane npm distribution. However, it routes authentication and UpViral operations through Membrane rather than UpViral's direct API, creating a meaningful third-party credential/data brokerage risk; combined with an unpinned global CLI install, this makes it medium risk rather than benign.