nso-device-ops

SUSPICIOUS: the skill’s capabilities are broadly aligned with Cisco NSO operations, and the package appears to be a real open-source MCP server with documented PyPI distribution. However, it forwards admin credentials to an external package, uses unpinned package trust, references a not-fully-verified resource domain, and allows insecure transport settings; those factors make it medium risk rather than benign.