mmk-paymint-licenses

The skill’s visible behavior matches its purpose, but it depends on a local `mmk` executable that could not be publicly verified and grants broader-than-needed shell scope via `Bash(mmk *)`. With no installer, source, or release verification for the CLI, this is best classified as SUSPICIOUS rather than benign or malicious.