naver-shopping-product-scraper

SUSPICIOUS: the stated scraping purpose is coherent, but the skill materially expands its footprint by auto-installing a separate BrowserAct skill/CLI and potentially forwarding API credentials and browsing context to third-party tooling. Install provenance appears same-brand and PyPI-backed rather than overtly malicious, so this is not confirmed malware, but the transitive dependency and no-confirmation install behavior make the skill higher risk than a normal scraper.