mcp-mastery

SUSPICIOUS: the skill’s purpose matches its content, but its footprint is inherently high-trust. It encourages installing and connecting many third-party MCP servers, often with unpinned package execution, remote HTTP transports, and credential forwarding. This is not confirmed malicious, yet it meaningfully expands attack surface and can route sensitive data/actions through external servers.