ecommerce-product-image-reference-scraper

SUSPICIOUS. The core scraping purpose is coherent, and the BrowserAct CLI appears to use a plausibly official same-org distribution path, so this is not confirmed malware. Risk comes from automatic dependency installation without confirmation, transitive installation of another skill, and delegated live browser behavior that broadens the skill’s effective footprint beyond simple image-reference extraction.