ecommerce-full-pipeline

SUSPICIOUS: the overall purpose is coherent for ecommerce automation, but the footprint is broader than a normal helper skill because it combines authenticated scraping, automated order placement using recipient PII, and weak publisher/release provenance. No direct evidence of credential theft or hidden exfiltration is shown, so this is not confirmed malware, but it carries meaningful operational and supply-chain risk.