check-mcp-tool-drift

SUSPICIOUS: the skill is internally coherent for remote MCP catalog drift analysis, but it exports full tool snapshots and payment authorization data to a third-party workers.dev service that is not strongly verifiable as a first-party official endpoint. No malware or installer behavior is evident, yet confidentiality and external trust risks are meaningful for a task that could plausibly be done locally.