1inch-mcp-server

SUSPICIOUS: The skill is largely purpose-aligned and points to official 1inch infrastructure, so it is not overtly malicious. Risk comes from two factors: real-world financial actions (swaps/orders) and the optional third-party `supergateway` bridge installed via `npx`, which may handle API credentials during stdio proxying.