linkfox-amazon-alexa-search

SUSPICIOUS: the shopping-assistant behavior mostly matches the stated purpose and the API key scope is proportionate, but the fallback path instructs a transitive skill installation from a direct ZIP with weak provenance. Main concerns are supply-chain trust, inherited permissions from the onboarding skill, and local persistence of full responses; there is no strong evidence of overt credential theft or malware in this skill alone.