doc-reader

SUSPICIOUS. Most of the skill aligns with a benign docs-reader purpose, but it unnecessarily expands trust by telling the agent to install additional skills from arbitrary documentation sites and to connect to arbitrary MCP servers. The main concern is transitive trust and unvetted remote instruction sources, not confirmed malware or credential theft.