alterlab-yok-tez

SUSPICIOUS rather than malicious. The skill’s thesis-search behavior is coherent with its stated purpose, and most content is ordinary documentation, but it depends on a third-party community MCP tool installed from an unpinned GitHub git URL and optionally sends queries through a non-official hosted MCP service. That install/data-path footprint is broader and less trustworthy than a simple guide to the official YÖK site, so the main concern is supply-chain and intermediary trust, not confirmed malware.