1688-supplier-profile-scraper

SUSPICIOUS. The stated purpose is coherent with supplier research, but the skill expands trust by auto-installing BrowserAct, installing another skill, and relying on externally fetched runtime instructions. Same-org evidence keeps this from malicious classification, but the transitive install chain and no-confirmation install behavior make it medium risk.