netbox-reconcile

SUSPICIOUS. The skill’s core behavior matches its stated network-reconciliation purpose, and its data flows to NetBox, pyATS, ServiceNow, GAIT, and Markmap are broadly coherent. The main concerns are proportionality and trust: it operates through several opaque local MCP wrapper scripts selected by environment variables, and it enables autonomous ServiceNow ticket creation while holding broader NetBox write capability than strict reconciliation requires. No clear credential theft, hidden exfiltration, or malicious installer behavior is present.