logistics-tracking

SUSPICIOUS. The core behavior is coherent: package tracking via official 17TRACK domains and an expected Playwright fallback. The main concerns are install trust and scope creep: execution of an unpinned third-party npm MCP package with limited publisher transparency, plus an unnecessary transitive skill-install step. No clear credential harvesting or off-purpose exfiltration is evident, so this is not malicious, but it carries medium supply-chain risk.