ecommerce-bestseller-ranking-scraper

SUSPICIOUS: the core browser-scraping purpose is plausible, but the skill is over-broad for a bestseller scraper and instructs automatic installation of a second skill and CLI without user confirmation. Provenance for BrowserAct is partially verifiable and not overtly malicious, so this is better classified as high-risk transitive trust and automation exposure than confirmed malware.