mdcp-ux

SUSPICIOUS. The skill’s behavior is mostly consistent with a UX/documentation helper, but it depends on an mdcp CLI and parent skill whose provenance is not established here. That unverifiable prerequisite raises supply-chain risk substantially, though there is no clear evidence of credential theft, covert behavior, or malicious data exfiltration in this skill itself.