integrate-context-matic

SUSPICIOUS: The skill’s core behavior mostly matches its stated API-integration purpose, and the flagged install commands are ordinary package-manager usage. Risk comes from unresolved trust in the external context-matic MCP backend, external routing of integration queries, and transitive installation/use of other skills. No direct evidence of malware, credential theft, or deceptive hidden execution is present.