adv-cli

SUSPICIOUS. The skill’s business functions are coherent with an e-commerce CLI, but the core executable is not verifiably sourced and it is entrusted with API credentials and sensitive commerce operations. Main risk is unverifiable external CLI provenance plus direct credential forwarding, not confirmed malicious exfiltration.