prisma-sdwan-status

SUSPICIOUS. The skill’s read-only monitoring purpose is coherent, but its trust boundary is not: it relies on a non-official personal MCP server and forwards PAN OAuth credentials into third-party code with weak provenance and unpinned install details. That is a high supply-chain and credential-forwarding risk, though not confirmed malware.