mcp-management

SUSPICIOUS. The skill’s core behavior matches its stated MCP-management purpose, but it expands the agent’s action surface to whatever MCP servers are configured and encourages non-interactive execution. The biggest concrete issue is install/execution trust: the documented Gemini package name is inconsistent with the official distribution, and the workflow relies on mutable third-party npm execution paths plus auto-approved tool actions.