instagram-following-lead-scraper

Purpose and capabilities mostly align: it is a browser-based Instagram lead scraping helper. The main risk is not hidden malware but the explicit auto-install of a third-party skill/CLI from a different publisher, creating a transitive trust chain and autonomous external execution. Overall this is suspicious/high-risk as an AI skill, primarily due to dependency installation behavior rather than confirmed malicious exfiltration.