noon-product-scraper

SUSPICIOUS. The stated purpose matches ecommerce scraping, and the BrowserAct dependency appears to come from the same publisher through documented channels. However, the skill expands trust to a third-party CLI plus another skill, allows automatic installation without separate approval, and partially defers behavior to dynamic runtime instructions outside this file. This is not clearly malicious, but it is a medium-risk transitive supply-chain dependency for a simple product-scraping skill.