yoprint

SUSPICIOUS: The skill is broadly coherent as a YoPrint integration, but it routes authentication and all operations through Membrane rather than directly to YoPrint, creating a third-party data and credential trust boundary. The npm-based CLI install is vendor-aligned and not inherently malicious, yet the unpinned global `@latest` install and intermediary architecture raise medium security risk rather than confirming malware.