Supply chain
mediumContextual risklow confidenceThe skill tells the agent to prefer running an unpinned npm package via `npx -y`, which fetches and executes whatever version is currently published without confirmation; this is an install path outside the declared curl-only use.
npx -y @michalpiszczek/ai-economics-mcp
vector:instruction
Counter-argument considered
The skill tells the agent to prefer running an unpinned `npx -y` package. That falls outside the pinned official-registry carve-out, and the behaviour goes beyond the declared curl-only usage. Nothing shown neutralizes it, though the package looks like the author's own MCP server and the risk is low.