exploring-windows

SUSPICIOUS. The skill is largely aligned with its stated purpose of Windows UI exploration and includes meaningful safety guidance, but it grants high-impact control over real desktop applications and relies on a local MCP server whose exact distribution path is not fully established in the skill. No clear credential theft, covert exfiltration, or malicious payload behavior is present.