prometheus-monitoring

SUSPICIOUS. The skill is largely coherent with its stated read-only Prometheus monitoring purpose and uses a legitimate PyPI distribution path, so there is no strong evidence of malware. However, it forwards credentials to a third-party MCP server and remote Prometheus-compatible endpoints, supports arbitrary custom headers, and explicitly allows TLS verification to be disabled, which creates meaningful credential and MITM risk beyond a minimal monitoring skill.