agentdrop

SUSPICIOUS. The skill's capabilities broadly match its stated publishing purpose, but it routes content and optional credentials to a third-party convex.site service and encourages adding a remote MCP server. The main concerns are third-party trust, credential forwarding, and autonomous publishing/deletion, not confirmed malware.