ae-ltd-mcp-foundry

SUSPICIOUS: The MCP scaffolding workflow is internally coherent and does not itself request credentials or route data off-host, but the cited upstream/tooling provenance is weak. Main risk is supply-chain and transitive skill installation from a personal GitHub source via third-party CLI, not direct malicious behavior in the skill text.