aruba-cx-interfaces

SUSPICIOUS: The skill’s purpose and read-only capabilities are coherent, and its expected data flow targets Aruba switch APIs directly. However, it depends on an unofficial community MCP server from an unrelated GitHub user, forwards device credentials into that code, and surfaced docs include disabled TLS verification, making the overall risk medium-high despite no confirmed malicious behavior.