woocommerce

SUSPICIOUS. The skill's WooCommerce purpose is coherent, and the npm-installed CLI appears to be an official Membrane tool, so this is not confirmed malware. But the skill routes authentication and API traffic through Membrane as a third-party intermediary instead of direct WooCommerce endpoints, creating medium risk from credential forwarding, proxy-mediated data access, and mutable CLI installation.