scrape

SUSPICIOUS. The core job-scraping behavior is coherent, but the skill is over-trusting: it auto-discovers and executes any installed portal skill, encourages later expansion via /add-portal, and uses those third-party skills as command authorities without provenance or pinning. Data flows otherwise match the stated purpose, and there is no clear credential theft or exfiltration in this skill alone, but the transitive skill-execution model materially raises supply-chain and execution risk.