google-maps-chain-store-lead-search

SUSPICIOUS: the stated purpose is plausible, but the skill’s footprint is broader than a simple lead-search helper because it auto-installs a transitive Skill/CLI dependency and may operate with existing browser session state. The BrowserAct dependency appears to come from an official same-brand source rather than an obviously rogue host, so this is not confirmed malware; however, the autonomous install behavior, transitive trust chain, and live browsing of untrusted content make the skill medium-to-high security risk.