msp-it-services-leads

SUSPICIOUS: The skill’s purpose and capabilities mostly align, but it asks the agent to add a hosted third-party MCP service, creating transitive trust and potential credential forwarding to ManyPI. No strong malware or exfiltration indicators are present; risk is mainly from remote-service dependence rather than deceptive behavior.