zamzar

SUSPICIOUS. The skill is internally consistent as a Membrane-based Zamzar integration, and the CLI comes from an official npm package rather than an obviously malicious installer. However, it routes Zamzar authentication and data through a third-party intermediary (Membrane) instead of the official Zamzar API, creating medium trust and data-flow risk that exceeds a direct single-service integration.