bgp-registry-intel

SUSPICIOUS. The stated purpose and documented data flows are coherent for a BGP/RPKI lookup skill, and requested scope is minimal and proportionate. However, the skill delegates all logic to an external MCP command supplied via BGP_INTEL_MCP_CMD, and the server binary/package provenance is not verifiable from the provided material. That unverifiable executable is the main risk; absent proof of an official same-org release trail, this remains a high supply-chain concern rather than confirmed malware.