affine-mcp-server-integration

SUSPICIOUS: The skill’s capabilities fit its stated AFFiNE integration purpose, and there is no sign of covert exfiltration, prompt-stealing, or malicious pre-execution behavior. However, it routes sensitive AFFiNE credentials to a community-published MCP server/CLI rather than official AFFiNE software, with unpinned install examples and optional remote deployment, creating a meaningful supply-chain and credential-forwarding risk.