zuplo

SUSPICIOUS: the skill's purpose is Zuplo integration, but its actual footprint centers on installing and trusting Membrane as an intermediary that handles authentication, connection creation, and request proxying. The installer is from an official registry and appears legitimate, so this is not confirmed malware, but the third-party credential and data mediation is broader than a typical direct Zuplo skill and creates meaningful trust and data-flow risk.