touchdesigner-mcp

The skill’s capabilities are broadly consistent with controlling TouchDesigner, so it does not look overtly malicious. However, it installs an externally distributed .tox plugin without strong release verification and then grants broad local control via unauthenticated localhost MCP, arbitrary TD Python execution, and input automation. Overall this is best classified as suspicious/high-risk rather than malware.