pyats-routing

SUSPICIOUS. The skill’s capabilities align with its network-routing analysis purpose and the commands are read-only, but it depends on opaque local executables ($MCP_CALL and $PYATS_MCP_SCRIPT) that likely receive access to a credential-bearing pyATS testbed file. With no verified provenance for those local components, the overall risk is medium-high even though there is no direct evidence of malicious exfiltration or deceptive behavior in the skill text.