vulnerable-mcp-servers-lab

SUSPICIOUS. The skill is internally consistent as a deliberately vulnerable security lab from the stated publisher, with standard GitHub/npm installation and no hidden exfiltration endpoint. However, it meaningfully enables offensive security testing, prompt-injection practice, code execution, and exposure of sensitive-pattern data, so it carries high operational risk despite not showing confirmed malicious intent.