k8s-workload-inventory

SUSPICIOUS. The skill’s purpose and read-only behavior are coherent, and `kubectl` is an expected dependency, but trust is weakened by a vendored third-party MCP server outside the publisher org that can receive kubeconfig/cluster credentials. This looks more like supply-chain and credential-forwarding risk than confirmed malicious behavior.