alibaba-listings-scraper

SUSPICIOUS: The stated purpose is coherent, but the skill’s real functionality is mostly a wrapper around automatic installation and execution of the BrowserAct skill/CLI. The dependency path appears official rather than obviously malicious, so this is not confirmed malware, but transitive skill installation and no-confirmation dependency install make the trust footprint larger than a simple scraper skill.