ecommerce-bestseller-ranking-scraper

SUSPICIOUS: the core scraping purpose is mostly coherent, but the skill expands into seller/profile research and instructs the agent to auto-install a separate skill and CLI without separate approval. Because the BrowserAct install path appears same-org and officially documented, this looks more like risky transitive dependency behavior than malware or credential theft.