google-maps-contact-extract

SUSPICIOUS: the skill's scraping behavior matches its stated lead-generation purpose, so it is not fundamentally deceptive, but it meaningfully expands agent risk through shell-evaluated helper output, large-scale browsing of arbitrary external sites, and explicit stealth/anti-scraping guidance. No credential harvesting or clear exfiltration is present, so this is better classified as a medium-risk automation skill than malware.