pal

SUSPICIOUS. The skill’s stated purpose is coherent for developer analysis workflows, and there is no direct malware behavior, credential theft, or command execution in the provided text. However, it delegates work to unspecified external MCP infrastructure, mandates a potentially third-party-routed model identifier, and shows branding/provenance mismatch ('pal' vs mcp__zen__) without install or endpoint transparency. Risk is moderate due to unverifiable trust boundaries, not confirmed malicious intent.