Crobox

This skill is coherent and appears to do what it says: it instructs you to use the Membrane CLI to talk to Crobox. The primary trust boundary is the Membrane service and the @membranehq/cli npm package you will install. Before installing/using it: (1) verify the npm package and its publisher (review the package on npm and the GitHub repo linked in the SKILL.md); (2) prefer running via npx or in an isolated environment/container if you do not want a global install; (3) be aware a global npm install executes third‑party code with your user privileges—avoid on sensitive hosts; (4) confirm the browser-based auth prompts are legitimate when creating connections; and (5) if you need higher assurance, review the CLI source or run it in a restricted environment. The registry entry's source is listed as unknown—if you rely on this in production, further verification of the repository/owner is recommended.