hotel-travel-leads

SUSPICIOUS. The core lead-generation purpose is coherent, and the remote endpoint appears to belong to ManyPI, but the skill asks the user to connect a third-party MCP server that may receive credentials and lead data and may expose broader sales/outreach tools than the skill describes. This is not confirmed malware, but it carries medium security risk from transitive trust and external data handling.