agent-reach-internet-access

SUSPICIOUS. The stated purpose broadly matches web/social scraping, but the trust chain is inconsistent and the footprint is too expansive: the skill installs or orchestrates multiple third-party tools, collects browser cookies/tokens, and can perform posting actions. This is high supply-chain and credential-forwarding risk, not confirmed malware.