mcp-server-sv-number

SUSPICIOUS. The skill is internally coherent for temporary-number OTP handling, and its documented data flow points to the named vendor rather than a hidden interceptor. However, it enables automated account verification with disposable numbers, executes an unpinned external package via `npx`, and forwards a paid API credential to that code, making it a high-abuse, medium-high security-risk skill rather than benign developer guidance.