gumroad-product-scraper

SUSPICIOUS. The core behavior matches the stated Gumroad scraping purpose, and the referenced BrowserAct dependency appears to be an official same-org tool rather than an obvious credential-harvesting lure. However, the skill instructs the agent to automatically install another skill and external CLI without separate approval, creating medium supply-chain and transitive-trust risk disproportionate to a simple scraper.