mercadolibre-product-scraper

SUSPICIOUS: the MercadoLibre scraping purpose is coherent, but the skill asks the agent to automatically install and trust a transitive BrowserAct dependency, then delegate behavior to dynamically fetched runtime instructions. Provenance appears same-org and package-manager-based, which reduces malware likelihood, but the auto-install and transitive trust chain make the skill medium risk.