rental-market

SUSPICIOUS: the skill’s purpose and capabilities mostly align with rental research, and there is no clear credential theft or malicious execution. The main concerns are trust and provenance: it routes work through a third-party MCP service, uses bash, and includes an unverified plugin marketplace install reference. Risk is moderate supply-chain/transitive-trust rather than confirmed malware.