linkedin-industry-search-scraper

SUSPICIOUS: the skill’s purpose matches lead scraping, but it expands trust by auto-installing a separate BrowserAct skill and CLI without user confirmation. The install path appears same-org and more legitimate than a random payload, so this is not confirmed malware, but the transitive dependency and autonomous installation behavior make it a medium-to-high risk AI agent skill.