aliexpress-product-scraper

SUSPICIOUS: the stated purpose is coherent for ecommerce scraping, but the skill’s footprint is broader than a simple scraper because it auto-installs a second skill and external CLI without user confirmation. Data flow is mostly consistent with browsing, yet the transitive trust chain and partially unverifiable CLI packaging make this a medium-high supply-chain risk rather than clearly benign.