mcp-security-hub

This skill is coherent with its stated purpose, but that purpose is to arm an AI agent with broad offensive security capabilities. The main concerns are AI-enabled exploit/scanning actions, elevated Docker and network privileges, credential forwarding into containers, and a mild publisher/install-source mismatch. High security risk, but not confirmed malware.