shopify-storefront-scraper

SUSPICIOUS. The core scraping purpose aligns with the stated Shopify research use case, and the install path appears officially associated with BrowserAct rather than a random third party. The main risk is that the skill autonomously installs and chains into another skill/runtime without user confirmation, creating medium trust and autonomy concerns; data exfiltration evidence is limited and there is no clear credential theft behavior in this skill alone.