mcp-servers-reference

SUSPICIOUS: the skill is mostly a documentation/reference guide and does not itself contain hidden execution or exfiltration, but its actual footprint is to encourage installing many external MCP servers that can receive sensitive credentials and perform high-impact actions. The warnings and least-privilege guidance reduce concern, yet the transitive trust, community-server installs, and support for trading/payments/web3/admin workflows make this higher risk than a normal documentation skill.