setup-scvelo-remote-tool

SUSPICIOUS. The skill is mostly coherent with its stated purpose: it sets up a Python environment, installs project-specific requirements, runs a local MCP server, and optionally connects it to ToolUniverse services. The main concern is install trust: the Connect relay uses a direct wheel from a project domain instead of the more easily verifiable documented GitHub-pinned path, and several dependencies are unpinned. Data flows and credential scope are otherwise proportionate, with keys directed to same-project platform endpoints rather than unrelated third parties.