amazon-ads

SUSPICIOUS: the skill’s purpose and capabilities mostly align with Amazon Ads management, but it depends on a third-party MCP intermediary that can receive account data and possibly credentials, and it can perform real write actions on ad accounts. No clear malware behavior or hidden execution appears in the skill file itself, but the vendor-gateway and transitive install model make the overall risk medium.