instagram-business-contact-search

SUSPICIOUS. The core purpose is coherent, but the skill's footprint is enlarged by mandatory third-party BrowserAct runtime use, automatic dependency installation without confirmation, and transitive installation of another skill. The BrowserAct source looks plausibly official, so this is not confirmed malware, but the trust and autonomy model is disproportionate for a simple contact-search helper.