alibaba-supplier-lead-research

SUSPICIOUS. The stated purpose is coherent, but the skill expands trust by auto-installing and delegating to an external BrowserAct skill/CLI without separate approval. Evidence suggests the dependency is likely official, so this is not confirmed malware, but the transitive install and mutable external runtime make it a medium-risk skill.