waratek

SUSPICIOUS: the install source is legitimate, but the skill's actual footprint is broader than a direct Waratek integration because it requires a Membrane account and routes authentication and API traffic through Membrane infrastructure. This is not confirmed malware, but the third-party credential and data mediation is a meaningful security risk.