alibaba-supplier-outreach

SUSPICIOUS: The skill’s behavior broadly matches its purpose, but trust is weakened by dependence on an unverified third-party remote MCP service and unclear publisher identity. The Alibaba/browser actions are proportionate and user-gated, so this is not confirmed malware, but it carries medium security risk due to supply-chain and hosted data-flow concerns.