product-opportunity-finder

SUSPICIOUS: the skill's purpose and capabilities mostly align, and there is no download-execute chain or obvious malware behavior. The main concern is data-flow integrity: all marketplace access is proxied through Nexscope and the base URL is configurable, so credentials and query data depend on a third-party endpoint rather than official APIs.