cicpa-company-query

SUSPICIOUS. The stated purpose is coherent, and the target domains/dependencies are mostly legitimate, but the skill's actual control point is an unreviewable local script that receives live CICPA session cookies harvested from the browser and stores them in the project directory. That credential-forwarding and missing provenance make the skill high risk even without proof of malicious exfiltration.

No strong indicators of intentional malware (no reverse shell, no eval/exec payloads, no obvious stealth/exfiltration to unrelated domains). The module is primarily an authenticated scraping/export automation tool. However, it has notable security risks: it writes session cookies/tokens to a local JSON file, and it can install Playwright dynamically via pip at runtime (supply-chain risk). ZIP extraction is guarded with a realpath check, lowering path traversal danger.