mcp-client

The skill’s purpose and capabilities mostly align: a universal MCP client reasonably needs HTTP/stdin transport, schema discovery, and tool invocation. The main concern is broad trust: it can execute arbitrary stdio commands, connect to arbitrary MCP endpoints, and forward tokens to those endpoints. With only official same-org `npx` examples and no obvious stealth or exfiltration service, this looks suspicious-by-scope rather than malicious.