kuaishou-comment-scraper

SUSPICIOUS: The stated purpose matches comment scraping, but the skill’s footprint includes automatic transitive installation of the BrowserAct skill/CLI and runtime-fetched behavior. The dependency appears to come from the same publisher and official docs, so this is not strong evidence of malware; however, auto-installing another skill without separate confirmation and relying on unpinned external runtime components makes the overall skill medium risk.