linkfox-sorftime-amazon-product-query

SUSPICIOUS: the core Sorftime product-search behavior and API-key scope are broadly aligned with the stated purpose, but the skill introduces medium trust risk through transitive installation of another skill and direct ZIP download/install from a vendor domain without visible verification. Data flows appear mostly consistent with a vendor API integration rather than credential harvesting, so this is not confirmed malware.