Avochato

This skill appears coherent, but consider the following before installing or using it: - You will be asked (manually) to install the @membranehq/cli npm package; verify the package and publisher before running a global npm install and avoid running installs as root. Inspect the package (or its repository) if you have concerns about postinstall scripts. - The integration routes API calls through Membrane: Membrane will see request and response data and will hold credentials for your Avochato connection. Review Membrane's privacy/security policies and confirm you are comfortable with that data flow (especially for PII). - The skill does not request or store local API keys; authentication is done via browser-based login to Membrane. In headless environments you will need to complete the printed-auth workflow. - If you need stronger assurance, verify the referenced GitHub repository (https://github.com/membranedev/application-skills) and the @membranehq/cli package contents before use. Overall, the skill is consistent with its stated purpose; the main operational risks are standard: installing an npm CLI and routing data through a third-party service (Membrane).