amazon-assistant

SUSPICIOUS: the skill's core behavior is coherent with its stated Amazon-assistant purpose, but it relies on highly sensitive cookie-based session reuse, browser-cookie export fallback, and consequential account automation. There is no clear third-party credential exfiltration or malware behavior, yet the credential scope and account-action footprint make it a medium-high security risk AI skill.