userflow

SUSPICIOUS: the skill's purpose broadly matches Userflow integration, and the install source is a legitimate npm package from the apparent publisher ecosystem. However, the actual data flow relies on Membrane as an intermediary for authentication and API proxying instead of direct Userflow API use, expanding trust and exposing Userflow access/data to a third-party platform. This is not confirmed malware, but it is a medium-risk integration due to proxy-mediated credentials and unpinned CLI installation.