walmart-category-listing-scraper

SUSPICIOUS: The skill's scraping purpose is coherent, but it expands trust by auto-installing a separate BrowserAct skill and CLI at runtime without user confirmation. The same-brand install evidence lowers the chance of outright malware, yet transitive skill installation, autonomous dependency changes, and third-party runtime data handling make the overall security posture medium risk.