google-search-contact-scraper

SUSPICIOUS. The stated purpose matches contact scraping, but the skill’s real footprint relies on automatic transitive installation of BrowserAct and dynamic external runtime instructions. There is no clear evidence of credential theft or overt malware, yet the combination of auto-installation, third-party skill delegation, and browsing untrusted web content makes this higher-risk than a simple search helper.