tycana

SUSPICIOUS: the stated purpose and MCP capabilities are coherent, and data flows mainly to Tycana's own service, but the optional plugin installation path introduces avoidable transitive supply-chain risk through third-party marketplace infrastructure. The skill is not clearly malicious, yet its trust model is weaker than a fully same-org, verifiable install path and it stores sensitive work-pattern data remotely.