database-query-analysis

SUSPICIOUS: the skill’s capabilities mostly match its stated Magento analytics purpose, and there is no clear malicious exfiltration path in the skill text. However, it grants broad database/config access through external MCP servers with undefined privilege boundaries and no embedded safeguards, so the overall risk is medium rather than benign.