maishou

SUSPICIOUS. The skill's capabilities broadly match its shopping-comparison purpose, but all data flows through an unofficial intermediary API, with hardcoded app-impersonation headers/openid and an unrelated external Referer. No overt malware or credential theft is present, yet the brokered data flow and opaque API usage make it higher risk than a normal documentation or official API skill.