moysklad-mcp-install

SUSPICIOUS. The skill’s purpose and capabilities mostly align: it installs a local MCP server, updates client configs, stores the token locally, and checks connectivity. The main concern is install trust: it directs the agent to fetch and execute code from a personal GitHub repository and then entrust that code with a bearer token and local config changes. I do not see clear credential exfiltration or unrelated access, but the zero-terminal framing for non-technical users increases social-engineering and supply-chain risk.