web-scraping

SUSPICIOUS. The scraping guidance itself is coherent, but the skill contains load-time shell execution that runs an unverified local helper from PATH or a local plugin directory before the user can inspect the rendered content. No clear credential theft or remote payload is present, so this is not confirmed malware, but the pre-exec trust model is disproportionate for a documentation-style skill.