apple-docs-research

SUSPICIOUS: the purpose is benign, but the skill is incomplete about where data actually goes. Based on the evidence, it likely relies on a third-party apple-docs MCP service that is not Apple-operated, may receive user queries and tokens, and is presented as the authoritative path for Apple docs. No direct malware indicators or exploit behavior are present, but the undisclosed third-party data flow and credential forwarding risk make it medium risk.