tiktok-creative-center-intent-scraper

SUSPICIOUS: the core scraping purpose is plausible, but the skill is overbroad, auto-installs a transitive dependency without confirmation, and delegates execution to BrowserAct runtime content and services. This is not confirmed malware, but it carries meaningful supply-chain, autonomy, and data-flow risk.