mcp-skill

SUSPICIOUS: the skill's main function is to hand control to external MCP servers and a third-party package whose provenance is not verifiable from the provided evidence. The remote-MCP concept is legitimate, but the install path and delegated trust are insufficiently scoped for the stated purpose.

This snippet does not contain direct malware (it does not execute commands or exfiltrate data), but it writes an MCP configuration file containing an auto-confirming `npx -y` command for a third-party npm package under an `@untrusted-org` scope. If downstream tooling consumes `mcp_config.json` to launch MCP servers, this creates a significant supply-chain execution risk. The referenced npm package/org should be verified and ideally pinned/allowlisted by the consuming application. Confidence is limited by the truncated snippet and lack of the config consumer code.