membrane

SUSPICIOUS: The skill’s stated purpose is coherent with an Amazon Ads audit, and its local file use is proportionate. Risk comes from transitive skill installation and routing Amazon auth/token refresh through a Membrane-controlled auth domain rather than clearly documented direct Amazon endpoints; that requires extra trust, but there is no clear evidence of malware or hidden exfiltration in the provided skill text.