agent-mongo

SUSPICIOUS. The skill’s stated purpose and read-only MongoDB capabilities are internally coherent, and the flagged command-injection patterns are documentation artifacts rather than executable directives. However, the skill depends on an unverifiable `agent-mongo` binary and forwards sensitive credentials/OIDC token material to it, which is disproportionate trust for a black-box executable even without direct evidence of exfiltration.