shopify-products-scraper

SUSPICIOUS: the core purpose is coherent, but the skill expands trust by auto-installing a separate CLI and another Skill without confirmation. The install source appears official rather than random, so this is not confirmed malware, but the transitive install and autonomous dependency setup make it medium risk.