github-repository-owner-lead-scraper

SUSPICIOUS: the stated purpose is plausible, but the skill is over-broad for public GitHub lead scraping because it auto-installs and relies on a separate BrowserAct skill/CLI, creating transitive trust and autonomous action risk. The install path looks official for BrowserAct, so this is not confirmed malware, but the dependency chain and browser-context reach make the skill high risk.