etsy-keyword-research

SUSPICIOUS: The Etsy purpose is coherent, but the skill’s footprint is broader than necessary because it auto-installs and depends on a separate BrowserAct Skill/CLI without asking for confirmation. Install provenance appears same-org and official rather than overtly malicious, so this is not confirmed malware; the main concerns are transitive trust, autonomous dependency installation, and handing browsing/auth context to third-party runtime tooling.