ui-verification

SUSPICIOUS. The skill’s capabilities are mostly aligned with its stated UI-testing purpose, and the autonomy-abuse flag looks like a false positive. However, it routes browser control and credentials through an external MCP wrapper, creating moderate supply-chain and credential-forwarding risk even though the component appears Amazon-aligned and officially documented.