ecommerce-new-arrivals-monitor

SUSPICIOUS: the skill’s scraping purpose is plausible, but its footprint is broader than a simple monitor because it auto-installs a second skill and an external CLI, then relies on live runtime instructions. Install sources appear aligned with the BrowserAct publisher, so this is not confirmed malware, but the transitive trust chain, autonomous installation, and potential handling of session data make it high risk for an AI agent environment.