google-maps-franchise-lead-search

SUSPICIOUS: the stated purpose is coherent with web-browsing lead collection, but the skill is not self-contained and instructs automatic installation of a third-party skill and CLI without user confirmation. The BrowserAct dependency appears to be officially associated with its publisher, so this is not confirmed malware, but the transitive install, dynamic runtime trust, and live-web agent exposure make the skill medium-to-high risk.