zenf-mcp

The skill’s stated workflow is proportionate and includes a user confirmation gate, with no described credential forwarding or external data destination. However, it relies on an unverifiable local executable, creating substantial supply-chain risk. The evidence does not establish malicious intent.