site-launch-checklist

SUSPICIOUS. The core checklist purpose is legitimate, but the skill’s footprint expands into transitive installation of many third-party skills, community MCPs, and a custom analytics proxy domain. Those behaviors are not strictly necessary for a launch checklist and create medium-to-high trust and data-flow risk even though there is no clear evidence of outright malware.