google-jobs-lead-scraper

SUSPICIOUS. The core purpose is coherent, but the skill’s insistence on automatic installation of a separate browser-act Skill and external CLI without user confirmation creates a transitive trust and autonomy risk. The install sources appear plausibly official rather than overtly malicious, so this is not confirmed malware, but the dependency and runtime footprint are broader than necessary for a simple jobs lead scraper.