fire-tracker

SUSPICIOUS. The skill's purpose and requested financial inputs are coherent, and it avoids binary installers or covert behavior. However, it is fundamentally a wrapper that tells the agent/user to trust and route sensitive financial data—and optionally an API key—through a third-party hosted MCP service with limited independently verified documentation in the provided evidence, so the overall risk is medium.