mcp-integration

SUSPICIOUS. The skill’s stated purpose matches its content, and it reads like an MCP configuration guide rather than malware. However, it encourages running mutable third-party npm packages and forwarding credentials to them, while one example package name is not strongly verified as official. No direct exfiltration, stealth, or pre-execution behavior is present, but install trust and credential-forwarding risk are material.