install-mcp

SUSPICIOUS: The skill’s purpose and capabilities mostly align, and its config patching matches MCP/Claude Desktop behavior. The main concern is supply-chain opacity: git repos and build commands come from an unseen registry and are executed through local installer scripts without visible pinning or integrity checks, so the installation footprint cannot be fully verified from the provided material.