web-atlas-decks

SUSPICIOUS: the skill's stated purpose is coherent, but its entire capability depends on an MCP endpoint hosted on an unverified shared workers.dev domain with no clear same-org documentation trail. There is no installer, credential harvesting, or overtly malicious behavior, yet the provenance and data-flow trust are weak enough to warrant caution.