github-organization-lead-scraper

SUSPICIOUS: the core scraping purpose is coherent, and BrowserAct appears to be an official same-brand dependency from documented sources, so this is not confirmed malware. However, the skill is higher risk because it instructs the agent to auto-install another Skill and external CLI without user confirmation, creating a transitive trust chain and external browser-runtime data exposure.