costco-product-scraper

SUSPICIOUS. The skill's scraping purpose matches its browsing capability, and the dependency chain appears to be official BrowserAct infrastructure rather than an unrelated third-party payload. However, it instructs the agent to auto-install another skill and CLI without user confirmation, creating a transitive trust chain and elevated execution risk. Main concern is install/execution trust and autonomy, not confirmed malicious exfiltration.