noon-seller-reference-scraper

SUSPICIOUS: the core scraping purpose is plausible and the cited BrowserAct CLI appears to use an official registry-backed install path, but the skill is overbroad for a seller-reference scraper and, more importantly, instructs automatic installation of a separate skill/CLI without user confirmation. The main risk is transitive trust and autonomous dependency installation rather than confirmed malware.