quip-to-gitlab-wiki

SUSPICIOUS. The core Quip-to-GitLab migration purpose is coherent, and the SSH examples are proportionate documentation, but the included GitLab MCP guidance introduces a separate third-party runtime dependency that receives GitLab credentials and is not GitLab's official MCP path. This makes the skill broader and riskier than a simple migration workflow, with medium supply-chain and credential-handling risk rather than confirmed malware.