tiktok-shop-review-scraper

SUSPICIOUS: the stated purpose is coherent, but the skill expands trust by auto-installing and invoking a separate BrowserAct skill/CLI without separate approval. Install provenance appears official enough to avoid a malicious classification, yet transitive skill installation and autonomous dependency installation make the overall risk medium.