bridgebound-history-16

SUSPICIOUS. The skill’s purpose and ColdIQ-oriented capabilities are broadly aligned, and data flows point to first-party ColdIQ services, not a third-party interception domain. However, it asks users to auto-install and run an unpinned MCP package with `npx -y @latest` and pass an API key into that downloaded code, while exact public package/release provenance was not independently verified from the provided evidence. This is more a supply-chain and credential-forwarding risk than confirmed malware.