log-analytics

SUSPICIOUS. The core purpose is coherent with the capabilities, and the main OpenSearch MCP package appears to be an official same-org tool with good provenance. However, the skill expands trust to external MCP servers, uses mutable `@latest`, forwards credentials to a helper process, and includes a configuration example that disables TLS verification. These issues make it medium risk rather than benign.