bale

SUSPICIOUS: the skill’s capabilities broadly match its Bale bot purpose, and the install path is package-manager based rather than raw download-exec. However, it relies on an unofficial third-party MCP package from a personal publisher and forwards the user's BALE_BOT_TOKEN into that code, creating moderate supply-chain and credential-forwarding risk despite otherwise coherent purpose and data flows.