This cloud-migration skill mostly matches its purpose, but it should be reviewed because it handles raw cloud credentials, precompiled scanners, remote topology sharing, and persistent infrastructure reports without enough containment guidance.
Install only if you are comfortable using this skill for real cloud-migration assessment. Use least-privilege temporary cloud credentials, avoid pasting secrets into chat, avoid command-line AK/SK where possible, verify any downloaded scanner binary before execution, choose a trusted MCP server because resource topology is sent there, and treat generated JSON/Excel/HTML reports as confidential infrastructure data.