worldlabs-topology-viz

SUSPICIOUS: the skill's stated purpose is coherent and confirmation controls are strong, but it relies on a non-official third-party MCP wrapper that receives the World Labs API key and prompt data. The main risk is credential forwarding and external data flow through unverifiable intermediary code, not overt malicious behavior in the instructions themselves.