tiktok-shop-trending-products-scraper

SUSPICIOUS. The skill’s scraping purpose matches its browser automation behavior, but it requires automatic installation of another skill and CLI without user confirmation, creating a transitive trust chain. Install provenance appears legitimate and same-org, so this is not strong evidence of malware, but the auto-install and dynamic runtime dependency make the security risk medium.