crunchbase-company-lead-scraper

SUSPICIOUS: the stated purpose fits lead scraping, but the footprint is broader than necessary because it auto-installs a separate skill and CLI, then relies on third-party browser automation that may use browser cookies/session state. The installer provenance looks plausibly same-org rather than clearly malicious, so this is not confirmed malware, but the transitive install and credential/session forwarding make the skill medium-high risk.