paloalto-panorama

SUSPICIOUS: the skill’s purpose and requested Panorama credentials are coherent, and no hidden exfiltration or pre-execution behavior is evident. However, it forwards a PAN-OS API key to community third-party MCP code and uses an environment-defined command backed by a non-vendor package, so install trust and credential-forwarding risk are disproportionate enough to warrant caution.