linkedin-activity-scraper

SUSPICIOUS. The core purpose is coherent with LinkedIn scraping, but the skill expands trust by automatically installing and invoking a separate browser-act Skill/CLI, with no per-action confirmation and potential use of sensitive browser session data. BrowserAct appears to be an official same-org dependency, so this is not confirmed malware, but the transitive installation and automation footprint make it medium-to-high risk.