instagram-post-lead-scraper

SUSPICIOUS: the purpose is plausible, but the skill expands trust by auto-installing a separate skill and CLI without user confirmation and then using browser automation that may access existing session state. Evidence points to medium-high security risk from transitive installation and browser-context exposure, not confirmed malware.