tiktok-shop-trending-products-scraper

SUSPICIOUS: the stated scraping purpose is coherent, and BrowserAct appears to be an official dependency, but the skill is higher risk because it auto-installs and delegates execution to a separate skill/CLI without user confirmation. Main concerns are transitive trust, autonomous installation, and possible forwarding of browser/session data to BrowserAct services if cloud features are enabled.