mercadolibre-seller-profile-scraper

SUSPICIOUS: the stated scraping purpose broadly matches the browsing capability, but the skill is overextended by requiring automatic installation of a separate BrowserAct skill/CLI without user confirmation. Data flow is mostly consistent with web scraping and there is no clear credential theft or malicious payload, yet the transitive-skill trust chain and delegated opaque browser runtime make this medium risk.