mercadolibre-product-scraper

SUSPICIOUS. The stated scraping purpose broadly matches the capability, but the skill is not self-contained and instructs autonomous installation of a separate skill and CLI without extra approval. Because the BrowserAct dependency appears to be same-org and officially documented, this is not strong evidence of malware; the main risks are transitive trust, autonomous dependency installation, and exposure to untrusted live web content.