supply-chain-automation

SUSPICIOUS. The skill is purpose-aligned for supply-chain automation and does not show malware, hidden exfiltration endpoints, or dubious installers. However, it includes examples that perform autonomous external business actions and handle credentials/operational data over APIs, SMTP, and RPA flows, creating moderate security risk if used directly without approval gates and proper secret management.