google-maps-competitor-listing-scraper

SUSPICIOUS: the scraping purpose is coherent, but the skill’s footprint is enlarged by mandatory delegation to BrowserAct plus automatic transitive skill/CLI installation without separate approval. Install provenance appears same-org and more consistent with official docs than a random payload, so this is not confirmed malware, but it carries medium risk from third-party runtime trust and autonomous dependency installation.