mcp-server-code-execution-mode

SUSPICIOUS. The stated purpose is plausible, but the actual footprint is broader: it installs an unpinned package, relies on a mutable third-party container image, auto-discovers and proxies arbitrary MCP servers, and forwards credentials into those servers. The local config access is expected for bridge setup, yet the combination of weak provenance, credential forwarding, and autonomous external actions makes this a medium-high risk skill rather than a benign narrowly scoped utility.