agent-app-store

SUSPICIOUS: The skill’s marketplace and deployment capabilities broadly fit its stated purpose, but it routes sensitive inputs and code to an only weakly verifiable MCP namespace and enables state-changing publish/deploy actions without clear trust boundaries. No direct malware, payload execution, or installer abuse is present in the skill text itself.