mcp-management

SUSPICIOUS. The skill's capabilities are broadly consistent with MCP management, but the install guidance is not fully trustworthy because it names a Gemini package that does not match Google's official documented package. This is primarily a supply-chain/install-trust issue rather than evidence of malware; no hidden execution, credential theft, or unrelated data exfiltration is shown in the provided content.