zapier-mcp

CRITICAL: The `code-review` skill's `allowed-tools` explicitly lists `Bash(rm -rf:*)`. This grants the AI agent the capability to execute `rm -rf` with arbitrary arguments. While the skill's documented intent is to use `git worktree remove` for cleanup (a safer, more controlled command), the direct `rm -rf` capability presents a severe security risk. An AI agent could potentially be prompted or misinterpret a situation, leading to unintended and destructive file system operations on the host machine. This is an extremely dangerous permission for an AI to possess. No hardcoded secrets were found, and network calls are to a known Zapier endpoint, but the `rm -rf` capability overrides other safety measures.