mcp-management

SUSPICIOUS: the skill’s purpose is coherent, but its footprint materially expands trust by installing arbitrary third-party MCP servers across many agents, often via unpinned npx commands and user-supplied remote URLs. The static findings are mostly documentation false positives, yet the underlying workflow still creates medium security risk from supply-chain exposure and credential forwarding to whatever MCP server/package the user selects.