crunchbase-investor-lead-search

SUSPICIOUS: The stated purpose is coherent with browser automation for Crunchbase research, and BrowserAct provenance appears same-org and documented rather than a random payload. However, the skill’s main footprint is delegating work to an externally installed skill/CLI and instructing the agent to auto-install it without user confirmation, creating transitive trust and autonomy risk disproportionate to a simple lead-search wrapper.