jp-executor

SUSPICIOUS. The skill is largely coherent with its stated purpose and uses apparently official Juspay tooling, so it is not fundamentally malicious. However, it handles live payment credentials, can perform real configuration/testing actions, forwards secrets to containerized MCP tools, and introduces transitive trust via another skill; these make it medium risk even with good purpose alignment.