lawyer-law-firm-lead-scraper

SUSPICIOUS: the stated purpose matches lead scraping, but the skill’s footprint is enlarged by mandatory delegation to BrowserAct and explicit automatic transitive installation without user confirmation. Same-org install evidence reduces malware concern, yet the autonomous dependency installation and broad live-web delegation make this a medium/high security risk skill.