vanta

SUSPICIOUS: the skill's purpose is plausible, but its actual footprint depends on a third-party integration broker that installs a separate CLI, stores auth locally, and proxies Vanta requests through Membrane rather than using direct Vanta-owned endpoints. This is not confirmed malware, but the trust expansion and third-party credential/data routing make it higher risk than a native Vanta skill.