pricewin-hotel-search

SUSPICIOUS. The skill’s hotel-search behavior matches its stated purpose and it does not request disproportionate credentials, but its core functionality depends on an externally operated `pricewin` MCP server that is not clearly verifiable as a published same-org package or public source release. Main risk is opaque supply chain and intermediary data handling, not confirmed malicious intent.