contact-details-scraper

SUSPICIOUS. The stated scraping purpose is coherent, and the BrowserAct dependency appears to come from the same org via documented channels, so this is not confirmed malware. However, the skill’s footprint is enlarged by automatic transitive skill installation, unpinned dependency trust, and live browsing of untrusted webpages through an external runtime, which makes the overall risk medium.