pyats-network

SUSPICIOUS: The skill is broadly aligned with legitimate pyATS network automation and uses an official-looking Cisco/pyATS ecosystem, but it grants powerful real-world capabilities: device reconfiguration, retrieval of sensitive configs/logs, and arbitrary Linux commands on testbed hosts. The main unresolved trust issue is the unspecified local MCP wrapper provenance. No evidence of malicious exfiltration, credential harvesting, pre-execution payloads, or third-party interception was found, so this is not malware, but it is a medium-risk operational skill.