aws-marketplace-scraper

SUSPICIOUS: the stated scraping purpose is plausible, but the skill’s footprint is broader than necessary because it auto-installs and delegates execution to a separate BrowserAct skill/CLI without separate approval. Install provenance appears official enough to avoid a malicious classification, yet the transitive trust chain, live web-content processing, and autonomous dependency installation make this a medium-high security risk.