1688-price-moq-scraper

SUSPICIOUS. The skill's scraping purpose broadly matches its behavior, but it offloads core execution to an auto-installed third-party skill and CLI, creating transitive trust and runtime supply-chain risk. The main concern is not confirmed malicious intent, but automatic dependency installation and delegated browser access with possible session/cookie exposure.