mcp-charter-planner

This skill appears to be what it says (BVI charter planning) and ships readable source, but before installing or running it with npx: 1) verify the npm package name and publisher (SKILL.md uses @vbotholemu while README mentions @velocibot — confirm which package you'll fetch). 2) Inspect the published npm package contents (or prefer installing from the bundled source) because npx will fetch and run remote code. 3) If you want to be cautious, run the tool in a sandboxed environment or vendor the package locally and pin a specific trusted version. 4) Check the package's dependency list and recently published versions on the npm registry for unexpected changes. If you can provide the npm package URL or publisher identity, I can re-check for mismatches or red flags and raise confidence.