facebook-marketplace-category-scraper

SUSPICIOUS: the stated purpose matches marketplace scraping, but the skill expands trust by auto-installing a separate BrowserAct skill and delegating execution to external tooling. The dependency appears official and same-org rather than overtly malicious, so this is better classified as medium supply-chain and transitive-trust risk than malware.