web-atlas-motion

SUSPICIOUS: The skill’s purpose is coherent, but trust rests on an unverified third-party MCP endpoint hosted on workers.dev rather than a clearly documented first-party domain. No overt credential harvesting or malware behavior is shown, yet the remote dependency and unclear publisher-to-endpoint relationship create moderate supply-chain and data exposure risk.