native-mcp

SUSPICIOUS. The core MCP-client purpose matches the documented capabilities, and the main dependency comes from official registries, so this is not confirmed malware. However, the skill materially expands agent authority by auto-loading third-party MCP tools, forwarding configured secrets to subprocesses/HTTP servers, and enabling server-initiated sampling by default; that broad trust model creates meaningful security risk disproportionate to a simple 'client' helper unless users tightly control which MCP servers they configure.