tiktok-shop-category-ranking-scraper

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it expands trust by requiring automatic installation of a separate BrowserAct skill/CLI and allows that install without explicit user confirmation. The referenced dependency appears same-org and officially documented, which reduces concern, but the transitive install/runtime dependency keeps overall risk at medium rather than benign.