scrape-zyte-login

SUSPICIOUS: the skill’s purpose and credential scope are mostly aligned with Zyte account setup, and no clear exfiltration endpoint or overtly malicious behavior is shown. However, it routes secret acquisition and API access through custom local wrapper scripts and persists credentials in .env, so the trust boundary is broader than the user-facing description and warrants medium risk.