desktop-commander-overview

SUSPICIOUS: the skill is internally consistent as a high-power desktop/ops MCP overview, with no clear credential theft, covert behavior, or mismatched capability. However, it gives the agent broad local and remote execution authority, so overall risk is medium-high; ecosystem install paths are official but include mutable remote-script patterns.