israeli-elder-care-navigator

SUSPICIOUS. The elder-care skill’s main content is coherent and non-invasive, but it recommends installing executable MCP components that extend its footprint beyond simple guidance. The Kolzchut MCP has moderate registry-based supply-chain risk due to unpinned npx execution; the IL Health MCP is higher risk because it is installed via unpinned git clone and pip from a personal GitHub repo rather than a well-verifiable same-org release path. No malicious behavior or credential harvesting is evident in the skill itself, but the transitive install pattern makes the overall package moderately risky.