linkedin-endorsement-scraper

SUSPICIOUS: the stated purpose broadly matches web data collection, and the cited BrowserAct dependency looks like an official same-org tool, so this is not confirmed malware. However, the skill is higher risk than a normal scraper because it instructs automatic installation of another Skill/CLI without user confirmation, expands into lead-generation/contact enrichment, and creates opaque third-party browser-runtime data flows.