noon-product-scraper

SUSPICIOUS: the stated purpose is coherent for ecommerce scraping, but the skill’s footprint expands trust by auto-installing and invoking the BrowserAct Skill/CLI without separate approval. Same-org documentation makes this look more like risky delegation than outright malware, but the transitive install, mutable branch reference, and external runtime handling of browsing/session data raise medium-high security concerns.