executing-web-scraping

SUSPICIOUS: the skill’s core purpose is coherent with scraping, but its footprint materially expands into anti-bot evasion, mobile API interception, and routing through third-party scraping services. It is not confirmed malware, yet it equips an AI agent with high-risk offensive collection techniques and nontrivial credential/data-flow exposure.

This fragment is high-risk supply-chain-adjacent content because it provides actionable instructions and code to evade anti-bot/WAF defenses (including TLS fingerprint spoofing and stealth automation) and to bypass mobile SSL pinning using Frida/mitmproxy to intercept and replicate API traffic. While it does not show classic malware payload mechanics, it meaningfully enables circumvention and potential unauthorized data collection. Treat as dangerous content and investigate whether it is merely documentation or is executed by the package.