mercadolibre-deals-scraper

SUSPICIOUS: the MercadoLibre scraping purpose is coherent, but the skill offloads core behavior to an auto-installed third-party dependency chain and another skill, with reduced user approval. Evidence suggests the dependency is same-org and official rather than an obvious credential-harvesting lure, so this is not confirmed malware; the main concern is medium supply-chain and transitive-trust risk.