temu-product-scraper

SUSPICIOUS. The stated purpose matches ecommerce scraping, but the skill’s footprint depends on automatically installing and invoking a separate BrowserAct skill/CLI, extending trust to dynamic external instructions. Because the dependency appears to come from the same verified org and a documented registry-based install path, this is not strong evidence of malware, but it is a meaningful supply-chain and transitive-install risk.