setup-cell2location-remote-tool

SUSPICIOUS. The skill’s core purpose and local setup are coherent, but it instructs installation of a non-PyPI relay package from a direct wheel URL and then uses that CLI to handle platform credentials and expose the local MCP service. That combination is a high supply-chain and credential-forwarding risk even without proof of malicious intent.