yelp-business-review-scraper

SUSPICIOUS: the stated purpose is coherent, and the dependency path appears to be official same-org BrowserAct infrastructure rather than an unrelated third party. However, the skill instructs silent auto-installation of another skill/CLI and delegates core execution to dynamically fetched BrowserAct runtime content, creating meaningful transitive supply-chain and execution-trust risk disproportionate to a simple review scraper.