clinical-trial-protocol-skill

SUSPICIOUS: the stated purpose is coherent and most capabilities are proportionate, but the required MCP dependency is too poorly specified to verify. The main risk is supply-chain/install trust around an unnamed .mcpb clinical-trials server; absent clearer provenance, this is medium-high security risk rather than confirmed malware.