amazon-niche-finder

SUSPICIOUS due to transitive skill installation and unpinned `npx` execution, not because of obvious credential theft or malicious data flows. The stated niche-research purpose is coherent, but the main security issue is that using this skill requires trusting an external CLI plus a separately fetched repository skill.