vinted-marketplace-scraper

SUSPICIOUS. The stated scraping purpose is coherent, and the dependency appears to be an official BrowserAct toolchain rather than a random payload. However, this skill instructs automatic installation of another skill and CLI without confirmation, creating a transitive trust chain and relying on mutable runtime-fetched instructions. That makes it medium risk despite otherwise proportionate functionality.