linkedin-job-search-scraper

SUSPICIOUS: the skill’s scraping purpose broadly fits browser automation, and the BrowserAct dependency appears to be an official same-project tool rather than an unrelated payload. However, the skill expands into lead-generation/contact discovery, auto-installs another skill/CLI without user confirmation, and depends on a dynamic credential-capable runtime that may route data through BrowserAct-managed services. This is more a transitive-trust and execution-risk problem than confirmed malware.