send-notification

SUSPICIOUS. The core behavior matches an internal messaging skill, and Intercom alignment is reasonable, but trust is weakened by the unspecified MCP dependency—especially for Slack, where official publisher provenance was not established. Scope is mostly proportional, yet attachment forwarding, local file reads, and channel-wide mentions create moderate risk that depends heavily on the connected MCP server’s trustworthiness.