productreview-au-scraper

SUSPICIOUS: the skill’s stated scraping purpose mostly matches its behavior, but it relies on automatic transitive installation of BrowserAct and delegates core execution to external CLI-managed runtime content. Same-org evidence lowers the chance of outright malware, yet auto-installation, third-party runtime trust, and possible credential forwarding make the skill a medium-to-high security risk.