mcp-ecosystem-optimizer

SUSPICIOUS: the stated purpose largely matches ecosystem analysis and planning, but the footprint expands through an unverifiable external CLI dependency, community-source research, and explicit transitive skill chaining. No direct credential theft or exfiltration is shown, but install/execution trust and indirect action pathways make this higher risk than a normal documentation skill.