ecommerce-review-scraper

SUSPICIOUS: The review-scraping purpose is plausible, but the skill’s footprint is broader than necessary because it auto-installs a transitive Skill and external CLI without separate approval. Publisher linkage to BrowserAct looks partially legitimate, reducing malware confidence, but the dependency chain and opaque runtime create high supply-chain and trust risk for an AI agent skill.