cml-packet-capture

SUSPICIOUS: the skill's purpose and capabilities are coherent for CML packet capture, and data flows largely match that purpose. The main risk is install/execution trust: a third-party MCP wrapper from a personal publisher receives raw CML credentials and mediates all API access, with no pinning or integrity guidance in the skill itself.