weweb

SUSPICIOUS. The skill is mostly coherent with its WeWeb integration purpose and uses a legitimate npm-distributed CLI, but it centralizes authentication and API access through Membrane rather than directly through official WeWeb endpoints. That third-party mediation plus unpinned CLI execution raises meaningful trust and data-flow risk, though not enough to call it malicious.