lead-intelligence

SUSPICIOUS. The skill’s overall purpose and core capabilities align, and its main API data flows appear to target official services. However, the requested credential scope is broader than necessary for a drafting-focused lead tool, especially the raw LinkedIn session cookie and X write-context tokens, and the browser-control workflow increases exposure. No confirmed malware or exfiltration behavior is present, but the credential and account-access footprint makes this a medium-risk skill.