temu-trending-products-scraper

SUSPICIOUS: the stated purpose matches ecommerce scraping, but the skill’s footprint is enlarged by automatic third-party skill/CLI installation and delegated live-browser execution. The BrowserAct dependency appears to use official, documented distribution channels, which lowers malware confidence, but transitive installation without user confirmation and handling of live web content make the skill medium risk.