douyin-profile-scraper

SUSPICIOUS: The stated purpose is coherent, but the skill’s footprint expands beyond a simple Douyin scraper by auto-installing and delegating execution to a separate BrowserAct skill/CLI. The install path appears official and not overtly malicious, yet transitive skill installation, dynamic runtime instructions, and possible credential forwarding make the trust model broader than the skill description suggests.