cml-node-operations

SUSPICIOUS: the skill’s capabilities align with CML node operations, but it routes credentials and network actions through a community-maintained third-party MCP package rather than an official Cisco-operated tool. That makes the main risk install/provenance and credential forwarding, with additional concern if SSL verification is disabled. No clear exfiltration or hidden behavior is present in the skill text itself.