Neron

This skill is coherent with its purpose (a personal knowledge-graph connector) but it gives any connected agent full read/write access to very sensitive personal data via a third-party endpoint (https://mcp.neron.guru/mcp). Before installing or connecting: - Verify the service and operator: ask for a homepage, privacy policy, and source code or repository. The registry metadata lists no homepage and the publisher is unknown — that reduces trust. - Treat the Telegram token/password as high-value secrets: only request tokens you can revoke, and avoid pasting them into shared or cloud-backed config files. Prefer storing them in a secure credential store if possible. - If possible, use a least-privilege token (read-only) for agents that only need to view data; avoid giving write/delete rights unless necessary. - Understand that the skill allows raw Cypher queries and 'full' verbosity, which can return complete data dumps — don't grant it access to real sensitive data until you trust the service. - Check TLS certificate and domain reputation for mcp.neron.guru and validate the Telegram bot identity (@NeronBetaBot) before sending credentials to it. - Consider testing with throwaway or synthetic data first, and ensure you can revoke the token (/token) and that revocation invalidates prior tokens. What would raise my confidence: a public homepage/privacy policy, audited source code or GitHub repo, documented token scopes, and a clear operator identity or third‑party audit.