amex-travel

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, but it requires high-value Amex credentials, persistent session cookies, and a bot-evasion browser stack for a read-only portal scraper. Data appears to flow to Amex rather than an unrelated proxy, so this is not confirmed malicious, but the credential scope and third-party execution footprint are disproportionate enough to warrant caution.