hiring-signals

SUSPICIOUS. The skill's purpose and capabilities mostly align with hiring research, and it does not request disproportionate credentials or show clear exfiltration behavior. However, it relies on a remote MCP shell and a marketplace/plugin source whose official provenance is not clearly verifiable, plus there is a domain mismatch between documented and referenced endpoints. This is better classified as medium supply-chain and remote-execution trust risk rather than confirmed malware.