chase-travel

SUSPICIOUS: the stated purpose matches the portal-search behavior, but the skill asks for online-banking credentials and 2FA while relying on third-party anti-detection tooling and an optional personal Docker image. The main risk is credential forwarding into unverifiable or unreviewed runtime components rather than direct evidence of exfiltration.