mcp-security-hub

The skill is internally consistent with its stated purpose, but that purpose is high risk: it equips an AI agent with offensive security and active testing capabilities, broad network reach, container execution, local file access via mounts, and optional credential forwarding. This looks more like a transparent offensive-security enablement skill than malware, but it is still dangerous and should be classified as high-risk/suspicious rather than benign.