aliexpress-search-results-scraper

SUSPICIOUS: the stated scraping purpose is coherent, but the skill expands trust by auto-installing a separate BrowserAct skill and CLI without user confirmation. Publisher alignment appears plausible and there is no direct credential-harvesting endpoint here, so this is not confirmed malware; the main issues are transitive installation and moderate external-runtime trust.