shopify-app-store-scraper

SUSPICIOUS: the stated purpose is coherent with web scraping, but the skill expands trust by auto-installing another skill and external CLI without separate confirmation. The install path is same-brand and registry-backed, so this is not confirmed malicious, but the transitive dependency and delegated runtime make it medium risk.