facebook-page-lead-scraper

SUSPICIOUS: the stated scraping purpose is plausible, but the skill’s real footprint relies on auto-installing a separate BrowserAct skill and CLI without confirmation. The install sources look same-org and documented, which lowers malware likelihood, but transitive installation and opaque delegated runtime keep the security risk medium-high.