agent-add-mcp

SUSPICIOUS. The skill is aligned with its stated purpose, but it expands trust to arbitrary third-party MCP servers found via web search, including local `npx` executables and remote URLs that may receive API-key env vars. There is no hidden exfiltration or overt malware behavior, yet the combination of web-discovered configs, executable server setup, and secret forwarding makes the skill medium risk.