amazon-sales-rank-scraper

SUSPICIOUS: the stated scraping purpose is coherent, but the skill’s footprint expands through automatic installation of a third-party BrowserAct skill/CLI and a transitive trust chain. No direct credential theft or overt exfiltration is shown, but auto-installing external runtime dependencies without confirmation makes this a medium-to-high security risk.