add-integration

SUSPICIOUS. The skill's purpose is coherent, but its main mechanism is risky: it discovers and executes arbitrary third-party npm MCP packages via npx, then forwards local credentials to them through generated env mappings. That is a strong supply-chain and credential-forwarding concern even without confirmed malicious intent.