costco-product-scraper

SUSPICIOUS: the stated scraping purpose is coherent, but the skill overreaches by silently auto-installing a separate browser automation skill/CLI and delegating execution to it. The install sources look plausibly official, which lowers malware likelihood, but the transitive trust chain, autonomous installation, and possible cookie/session exposure make the skill medium-high risk.