mcpc

SUSPICIOUS. The skill is mostly coherent with its stated purpose as an MCP CLI guide and uses an officially published same-org tool, so there is no strong malware signal. However, it enables broad connections to arbitrary MCP servers and can forward tokens/OAuth credentials to those endpoints, which creates meaningful security risk beyond a narrowly scoped single-service skill.