company-contact-enrichment

SUSPICIOUS: the stated purpose is plausible, but the skill’s footprint depends on automatic installation and use of a separate BrowserAct skill/CLI, creating transitive trust and moderate autonomy risk. Install provenance looks relatively coherent and same-ecosystem, so this is not confirmed malware, but the auto-install behavior and live web delegation make it higher risk than a simple enrichment guide.