opendocswork-mcp-office-processing

SUSPICIOUS. The skill’s document-processing behavior is proportionate and there is no sign of credential harvesting, hidden network exfiltration, or unrelated access, but install trust is weakened by publisher/repo provenance mismatches and an unverified GitHub Releases binary path. Official cargo distribution reduces concern, yet the inconsistent ownership trail keeps this above benign.