ipfix-receiver

The skill’s stated capabilities are coherent with network flow monitoring, and no direct credential harvesting or suspicious outbound routing is described. However, its core dependency `ipfix-mcp` is not publicly verifiable from the provided evidence, so the main risk is high supply-chain/install trust rather than confirmed malicious behavior.