lanhu-mcp-collaboration

SUSPICIOUS. The stated purpose is coherent for a Lanhu MCP integration, and the requested Lanhu cookie/optional Feishu webhook are broadly proportionate. The main issue is install trust: the skill published by ara.so directs installation of a separate personal GitHub repo and execution of repo-provided scripts, creating a significant supply-chain risk even without clear evidence of malicious behavior in the skill text itself.