Verbolia

This skill appears to do what it says — it uses Membrane to connect to Verbolia and run actions — but check a few things before installing/running: - The SKILL.md expects you to install the Membrane CLI via 'npm install -g @membranehq/cli' (or use npx). The registry metadata did not declare required binaries; make sure you have a safe Node/npm environment before doing a global install. Prefer 'npx' or a local install if you want to avoid global changes. - Verify the @membranehq/cli package and the Membrane service: review the package source (GitHub link in SKILL.md) and the Membrane privacy/security docs. Membrane will handle your Verbolia credentials and will proxy API calls, so you must trust that service with access to your Verbolia data. - Avoid copy-pasting auth codes or running installs as root/admin unless you understand the implications. If you need higher assurance, inspect the CLI source or run it in an isolated environment (container or VM). Given the mismatch between declared requirements and the written instructions (missing required binary declarations) and the moderate risk of running a global npm package, treat this as suspicious but not clearly malicious. If you want a firmer "benign" verdict, provide an explicit required-binaries list (node/npm/membrane) and confirm the @membranehq/cli package source and integrity.