webmcp-agents

SUSPICIOUS: the stated purpose is documentation for WebMCP setup, but its primary actionable step is transitive installation of another third-party skill via `npx skills add`, including wildcard/global options that exceed the narrow setup goal. There is no confirmed credential theft or malicious endpoint in the visible text, but the trust chain and expanded install scope make this medium-risk and internally disproportionate.