flipkart-review-scraper

SUSPICIOUS. The stated purpose matches browser-based scraping, and the referenced BrowserAct dependency appears to be distributed through same-org docs/GitHub with a PyPI/uv install path rather than an obviously rogue payload. The main risk is proportionality and trust: this skill silently expands into a separate skill plus CLI at runtime without user confirmation, creating a transitive supply-chain and execution risk. No direct credential theft, exfiltration endpoint, or clearly malicious data flow is shown here, so this is not malware, but it is a medium-risk skill.