Security Monitoring

SUSPICIOUS: The skill's capabilities are largely aligned with a security-monitoring purpose, and the visible install path appears to use the official Skills CLI plus same-repo GitHub source. However, the core execution/data plane depends on an underspecified MCP server ('security-mcp') with no verifiable origin, auth model, or endpoint details, so sensitive security data and response actions would traverse an unverified backend. This looks more like incomplete trust/data-flow documentation than confirmed malware.