ecommerce-shipping-fee-scraper

SUSPICIOUS: The stated scraping purpose is coherent, but the skill expands its footprint by auto-installing another skill and external CLI without separate approval. BrowserAct provenance appears reasonably legitimate, so this is not confirmed malware, but the transitive install chain and autonomous dependency setup make it medium risk.