facebook-marketplace-vehicle-listing-scraper

SUSPICIOUS: the stated scraping purpose is coherent, but the skill offloads execution to BrowserAct, auto-installs a separate skill/CLI without confirmation, and creates a transitive trust chain. Evidence suggests the dependency is likely legitimate, so this is not confirmed malware, but it carries meaningful supply-chain and agent-action risk.