1688-wholesale-product-scraper

SUSPICIOUS: the stated scraping purpose is plausible, but the skill’s footprint is enlarged by mandatory third-party BrowserAct dependencies, automatic installation without confirmation, and transitive skill trust. No direct credential theft or obvious malicious exfiltration is shown, yet the install and runtime model makes this higher-risk than a normal single-purpose scraper.