profit-autopilot

SUSPICIOUS: The skill’s commerce automation purpose broadly matches Shopify publishing, but it enables autonomous live actions and asks users to run local opaque scripts via PowerShell with ExecutionPolicy Bypass. No external download/exfiltration is visible in the skill text, so this is not confirmed malware, but the undisclosed credential handling and hidden script behavior make the execution trust and real-world action risk materially elevated.