tiktok-shop-seller-scraper

SUSPICIOUS: the skill's scraping purpose is plausible, but it delegates execution to a third-party BrowserAct skill/CLI, allows automatic transitive installation without separate approval, and may forward credentials/data into external tooling. The install source looks official enough to avoid a malware classification, but the trust expansion and autonomous dependency installation make this a medium-high security risk.