shopping

SUSPICIOUS: The shopping behavior mostly matches the stated purpose, and the prompt-injection surface is typical for a shopping workflow. The main security issue is trust: the skill depends on several runtime CLIs whose provenance is not verifiable from official vendor sources, and it can drive purchase actions plus read local preference files. That makes the skill high risk from a supply-chain and execution-trust perspective even without clear malicious intent.