pp-alaska-airlines

SUSPICIOUS. The skill's core purpose and capabilities mostly align, and the installer appears to come from the same publisher ecosystem rather than an unrelated payload. However, it relies on a third-party unofficial CLI that imports browser cookies/keychain auth and can forward results to arbitrary webhooks, which is broader and riskier than a simple airline search skill. This looks more like a high-risk third-party integration than confirmed malware.