dune-mcp-skill

SUSPICIOUS: the skill’s purpose and Dune data flows are coherent, and the remote endpoint is official `api.dune.com`. The main risk is that it requires a non-Dune intermediary CLI (`uxc`) to store and forward the Dune API key, creating a broader trust boundary than a first-party integration.