godot-interactive

SUSPICIOUS: the core capability is coherent for Godot testing, and data flows stay local, but install trust is weakened by the placeholder repo/publisher mismatch and reliance on a community MCP server. This looks like a legitimate testing skill with moderate supply-chain risk rather than credential theft or overt malware.