render-automation

SUSPICIOUS: The skill's purpose is coherent, but it relies on a third-party hosted MCP to perform real Render actions and likely handle credentials, while understating that trust boundary with 'no API keys needed.' No malware-like payload execution is present, but the indirect credential/data flow and documentation inconsistencies make this higher risk than a direct official Render integration.