c-tracking

The skill aligns with its stated purpose of tracking shipments via an external CLI and presenting status/history data. However, there is a notable supply-chain concern: ordercli’s provenance is not specified, creating potential risk if the binary is unverifiable. The data flow is limited to user input and carrier API responses, with no credentials implied. Overall, the footprint is moderately coherent but hinges on the trustworthiness of the external ordercli tool. Suspicious due to missing install/source details for the CLI; treat as moderate risk until provenance is clarified.