data-scraper-agent

SUSPICIOUS. The skill is mostly coherent for an automation/scraping guide and uses official install channels, so it does not look malicious. However, it creates a high-autonomy agent that ingests arbitrary external content, uses secrets in CI, and writes back to the repository; those capabilities are proportionate but still medium risk, especially with broad scraping scope and unpinned dependencies.