medical-imaging-review

SUSPICIOUS: the stated purpose is benign and mostly aligned with literature-review capabilities, but the skill is over-permissioned with Bash and depends on MCP servers whose trust varies. Official PubMed API use is reasonable, yet third-party hosted MCP routing and unofficial arXiv MCP provenance weaken data-flow integrity and increase supply-chain and prompt-injection risk.