israeli-bank-connector

SUSPICIOUS. The skill's capabilities broadly match its financial-analysis purpose, but it operates on extremely sensitive banking credentials and transaction histories while relying on locally built third-party MCP wrappers from GitHub and persistent local storage in one variant. Data flows appear local and purpose-aligned rather than overtly exfiltrative, so this is not confirmed malware, but the install trust and credential sensitivity make the overall security risk medium-high.