splunk-indexes

SUSPICIOUS. The skill’s purpose is coherent, but its execution path is not: it asks for Splunk service credentials and routes them through an ambiguously sourced npx MCP server with no pinned version and no verifiable same-org provenance. This is disproportionate supply-chain and credential-forwarding risk rather than confirmed malware.