asalbanoo

SUSPICIOUS: the purpose and core capabilities are coherent for a read-only shopping skill, but trust is weakened by transitive installation of an unofficial MCP package from a personal publisher and an optional arbitrary HTTP proxy that can intercept traffic. No clear credential harvesting or overtly malicious behavior is present.