amazon-rank-tracker

SUSPICIOUS due to transitive skill installation and unpinned remote fetches, but not malicious from the provided content. The skill’s stated purpose is coherent, and there is no evidence of credential theft or attacker-controlled endpoints; the main risk is supply-chain trust in the external skills CLI and repository.