shopify-app-store-scraper

SUSPICIOUS: the core scraping purpose is plausible, but the skill is over-broad for its stated Shopify App Store role and, more importantly, it instructs the agent to auto-install and rely on a third-party skill/CLI without separate user approval. Install provenance looks official enough to avoid a high supply-chain verdict by itself, but the transitive skill installation, autonomous install behavior, and possible third-party browser/cloud data path make this medium risk.