discord-bot

SUSPICIOUS. The stated purpose matches Discord bot management, and the Discord setup flow uses official Discord concepts. However, the skill depends on an ambiguously sourced 'discord-mcp' server with no verified same-org provenance or pinned release path, creating medium supply-chain and credential-forwarding risk if users connect their bot token to a third-party MCP implementation. No direct exfiltration, malware behavior, or dangerous pre-execution commands are present in the skill text itself.