finops-manager

SUSPICIOUS. As a compatibility alias, this skill is overbroad: instead of simply routing legacy invocations, it imposes a full framework with external MCP tools, terminal proxying, web-content handling, and persistent logging. There is no confirmed malware or explicit exfiltration, but the capability footprint is disproportionate to the stated purpose and creates medium risk through transitive trust and untrusted-content-to-action paths.