ecommerce-promotion-deal-scraper

SUSPICIOUS: the skill’s purpose and browsing capability are broadly aligned, but it directs the agent to auto-install a transitive BrowserAct dependency without separate approval. The install path appears same-org and registry-backed rather than overtly malicious, so this is not confirmed malware; the main concerns are transitive trust, autonomous installation, and unpinned mutable runtime/CLI dependency.