linkfox-lanjing-mercado-product-selection

SUSPICIOUS: the core Mercado research purpose broadly matches the gateway/query capabilities, and the credential scope is proportionate. The main risks are third-party gateway mediation, mandatory local persistence of full responses, and especially the fallback transitive installation of another skill from a ZIP archive without strong public verification artifacts. This looks more like a commercial proxy skill with medium trust/supply-chain risk than confirmed malware.