smart-session-start

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and it lacks direct install, credential theft, or code-execution behavior. Risk comes from mandatory automatic activation and reliance on unverified external MCP servers that receive recalled project context, creating moderate trust and data-flow concerns.