claude-peers-mcp

SUSPICIOUS. The core localhost broker design is coherent with the stated purpose, but the skill asks users to disable Claude safety/approval controls and install/run code from a personal GitHub repo not clearly tied to the publisher. The optional OpenAI-powered auto-summary also sends local work-context data off-box for a nonessential feature. Main concern is elevated execution trust and autonomy risk, not confirmed malware.