yzr-outline-wiki

SUSPICIOUS. The skill’s overall purpose aligns with its capabilities and it uses official Outline MCP/REST endpoints, so it does not look malicious. However, it instructs the agent to obtain and reuse the raw Outline API key from local config files for direct curl calls, creating disproportionate credential-handling risk compared with a pure MCP workflow; destructive write capabilities further increase impact if misused.