mcp-security-hub

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent broad offensive-security capability with elevated Docker privileges, mounted local data, API-key forwarding, and optional docker.sock access. The main concern is not hidden malware but the high-risk operational footprint and autonomous penetration-testing potential.