website-newsletter-page-scraper

SUSPICIOUS: the stated scraping purpose is broadly coherent, but the skill’s footprint is enlarged by mandatory BrowserAct dependency installation, transitive skill loading, and instructions to bypass user confirmation. No clear credential theft or covert exfiltration is shown, so this is not confirmed malware, but it is a medium-high trust and autonomy risk.