wikipedia-research

SUSPICIOUS. The stated purpose is benign and the visible data flow aligns with Wikipedia research, but the skill's core capability depends on executing an unspecified local script via `WIKIPEDIA_MCP_SCRIPT`. Because that executable dependency is unverifiable from the skill and not pinned to an official publisher or release source, the skill carries high supply-chain risk despite no direct evidence of credential theft or malicious exfiltration.