hiring-company-lead-scraper

SUSPICIOUS: The stated purpose matches lead scraping, but the skill expands trust by auto-installing a separate BrowserAct skill/CLI without confirmation and delegating live web access to external browser automation that may reuse cookies/session state. Same-org evidence lowers the chance of outright malware, but transitive installation and autonomous browser tooling make this a medium-risk skill.