ecommerce-marketplace-offer-scraper

SUSPICIOUS: the core scraping purpose is coherent, and the dependency appears to be an official BrowserAct tool distributed via documented channels, so this is not confirmed malware. However, the skill tells the agent to automatically install and invoke another skill/CLI without user confirmation, creating a transitive trust chain and medium supply-chain risk that is disproportionate to a simple scraper.