competitor-engagers

SUSPICIOUS: The skill’s purpose and requested credentials are mostly aligned with lead generation, but trust is reduced because the actual npm script is hidden and the workflow relies on a third-party LinkedIn data intermediary instead of official APIs. Risk is medium rather than high because there is no direct evidence of credential theft, stealth, malware, or autonomous outreach.