sellersprite-rpa

This module is not obviously malicious by itself, but it is security-sensitive infrastructure: it executes an external bsk binary determined by environment/PATH (and an unusual hardcoded Windows fallback) and delegates high-impact actions to that binary. In particular, caller-provided code is forwarded to bsk’s evaluate capability and caller-provided URLs and screenshot output paths are forwarded without validation. Treat this as a potential execution-primitive and supply-chain risk surface; ensure the bsk binary is trusted/integrity-checked and that url/code/path inputs are controlled or strictly allowlisted by the calling application.