lead-scoring

SUSPICIOUS. The core lead-scoring content is benign and well-aligned with its stated purpose, but the companion-check feature introduces a meaningful transitive-install risk by encouraging the agent to install additional third-party skills via `npx skills add`. This is not confirmed malware, and there is no credential harvesting or exfiltration in the provided text, but the unpinned remote skill installation path is disproportionate to a sales-framework guide and raises medium security concern.