saudi-shipping

SUSPICIOUS. The skill’s overall purpose and capabilities mostly align with a Saudi shipping integration guide, and it does not install external code. However, it forwards sensitive credentials and shipment PII to remote APIs, includes real-world shipment-creation actions, uses insecure HTTP for SMSA, and references a J&T endpoint whose official relationship to the Saudi onboarding domain is not clearly verified.