why

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, and there is no malicious installer or explicit credential theft pattern. However, its default behavior is unusually broad: it enumerates all available MCPs and queries multiple external systems in parallel using existing authenticated access, creating medium data-exposure risk that may exceed least-necessary scope for some investigations.