use-twenty-mcp

SUSPICIOUS. The visible skill instructions are purpose-aligned and the command-injection hits are benign markdown, but the real trust boundary is deferred to an unseen MCP setup file. Because public evidence shows third-party Twenty MCP servers that receive credentials, and this skill does not reveal whether setup uses official Twenty-controlled endpoints or community intermediaries, install/data-flow trust is incomplete and medium risk.