amazon-price-availability-monitor

SUSPICIOUS: the stated purpose is coherent, but the skill's footprint is broadened by mandatory third-party runtime use, automatic transitive skill installation, and instructions to bypass user confirmation for dependency installs. No clear credential-harvesting or attacker-controlled endpoint is shown, so this is not confirmed malware, but it presents meaningful agent trust and execution risk.