amazon-asin-detail-scraper

SUSPICIOUS: the stated scraping purpose broadly matches the capability, but the skill’s footprint is enlarged by mandatory BrowserAct dependency installation, transitive skill trust, and automatic setup without separate approval. Data flows appear same-brand and not overtly deceptive, so this is not confirmed malware, but it carries meaningful supply-chain and agent-autonomy risk.