productreview-au-scraper

SUSPICIOUS: the stated purpose matches ecommerce/review scraping, but the skill expands trust by auto-installing and delegating to a separate BrowserAct skill/CLI without user confirmation. The install source appears officially associated with BrowserAct and not overtly malicious, so this is not confirmed malware; the main concern is medium supply-chain and transitive-trust risk from dynamic dependency installation.