mcporter

SUSPICIOUS: The skill is coherent with its stated purpose and uses largely verifiable distribution channels, so it is not malicious on its face. However, MCPorter is a high-trust bridge: it can execute local stdio server commands and route data, including env-based credentials, to arbitrary configured or direct MCP servers, so the main risk is downstream server trust and broad remote action potential rather than the skill text itself.