agent-mongo

SUSPICIOUS/HIGH-RISK rather than confirmed malware. The skill’s MongoDB behaviors are purpose-aligned, but its trust model is weak: it depends on an unverifiable local `agent-mongo` binary and forwards database credentials to it, which by policy requires elevated risk scoring.