fortianalyzer-ops

SUSPICIOUS: the skill's stated purpose and read-only capabilities are internally consistent, and the intended endpoint aligns with FortiAnalyzer JSON-RPC. However, the skill delegates all sensitive access to an unspecified FORTINET_MCP_CMD binary with no verified public provenance or release artifacts in the evidence, while forwarding the FortiAnalyzer API token to it. That makes this primarily a supply-chain and credential-forwarding risk rather than confirmed malware.