capterra-company-lead-scraper

SUSPICIOUS: the stated purpose matches lead scraping, but the skill expands trust by auto-installing a transitive BrowserAct Skill/CLI and potentially using existing browser session data. Evidence suggests same-org official distribution rather than confirmed malware, so the main concerns are autonomous dependency installation, third-party runtime trust, and moderate data exposure.