mcp-server

SUSPICIOUS: the skill is broadly coherent as a local MCP wrapper, and its npm dependency path is normal, but it relies on a personal-repo browser-automation layer that inherits access to authenticated Chrome sessions and forwards user prompts to multiple third-party AI services via web UI automation rather than official APIs. This is not confirmed malware, but it carries meaningful trust and data-flow risk beyond a simple 'reference' skill.