mcp-management

SUSPICIOUS: the skill’s core behavior fits its stated MCP-management purpose, but the recommended Gemini CLI install command does not match the publisher’s official package name, creating a meaningful supply-chain trust issue. Data flows are mostly proportionate to MCP orchestration, yet delegating tool execution to an external AI CLI with auto-confirmation raises additional operational risk.