linkedin-post-comments-scraper

SUSPICIOUS: the stated prospecting purpose matches LinkedIn scraping, and BrowserAct appears to be an official dependency, but the skill is high-friction from a trust perspective because it auto-installs a separate skill/CLI without confirmation and delegates live browser behavior to that external runtime. Risk comes more from transitive installation and autonomous browser execution against third-party content than from confirmed malicious behavior.