domain-phone-enricher

SUSPICIOUS: the stated contact-enrichment purpose is plausible, but the skill offloads work to an external browser automation ecosystem, instructs automatic dependency installation without separate approval, and may expose browser session context to third-party runtime components. Same-brand GitHub/PyPI evidence reduces the chance of outright malware, but the transitive-trust and browser-session risks are material.