fortimanager-ops

SUSPICIOUS. The skill’s capabilities and required credentials are mostly aligned with FortiManager operations, and no malicious data exfiltration or deceptive routing is evident. The main concern is trust in the local `fortinet-mcp` intermediary that receives the FortiManager token, with only partial same-project provenance and no strong release verification; combined with production write capability, this makes the skill medium risk rather than benign.