mcporter-setup

SUSPICIOUS: the skill’s purpose mostly matches its capabilities, but it asks the agent to install and run third-party CLI tools, pass credentials into them, and interact with arbitrary user-supplied MCP endpoints. The upstream `mcporter` usage appears legitimate, so this is not confirmed malware, but the combination of external code execution, credential forwarding, and untrusted remote server interaction makes the skill medium-to-high security risk.