mcp-cli

SUSPICIOUS: the skill’s purpose is coherent, but its footprint is too trust-heavy for a simple MCP helper. It requires a third-party CLI from a personal GitHub repo using clone/build instructions, then routes user data and sometimes credentials into external npm packages, Docker images, and remote MCP endpoints. No confirmed malware or hidden exfiltration is shown, but the install provenance and credential-forwarding patterns make this a high-risk skill.