sephora-product-scraper

SUSPICIOUS. The stated purpose fits product scraping, but the skill's key behavior is to auto-install and defer execution to BrowserAct without separate user confirmation. Because the dependency path appears official and registry-backed, this is not confirmed malicious; however, the transitive skill installation and delegated runtime make the footprint broader than a simple Sephora scraper and raise medium security risk.