aiven-setup

SUSPICIOUS. The skill is purpose-aligned for Aiven OpenSearch deployment and uses mostly official infrastructure, but it requires a high-trust remote MCP with secrets enabled, forwards generated credentials into additional tooling, allows unpinned uvx execution, and references transitive installation/delegation. This looks more like a high-trust cloud automation skill than malware, but its credential and execution footprint is significant and should be used cautiously.