career-site-job-lead-scraper

SUSPICIOUS: the core scraping purpose is coherent, and the BrowserAct dependency appears to come from an official same-brand source, but the skill expands trust by auto-installing both a third-party CLI and another skill without separate approval. The main concerns are transitive skill installation, autonomous dependency installation, and possible exposure of browser session context during live browsing rather than clear malware behavior.