cap-mcp-server

SUSPICIOUS: the skill’s purpose is plausible and its overall footprint is typical for MCP setup, but the documented package names and commands do not align with the currently verifiable official SAP/CAP/UI5/Fiori MCP packages. This looks more like inaccurate or stale guidance than confirmed malicious behavior, yet the mismatch creates meaningful install-trust risk because users may execute the wrong packages through `npx`.