google-maps-email-extractor

SUSPICIOUS: the core purpose is coherent, but the skill expands trust by auto-installing a separate BrowserAct skill/CLI and may expose browser-resident session data through a broad third-party runtime. Install provenance looks partially legitimate and same-org, so this is not confirmed malware, but the transitive install and broad browser access make it medium risk.