linkedin-post-reactions-scraper

SUSPICIOUS: the stated purpose matches LinkedIn data collection, but the skill’s footprint is broadened by mandatory reliance on BrowserAct, automatic dependency installation without user confirmation, and transitive skill loading. The install path looks more legitimate than a random payload, so this is not confirmed malware, but it is a medium-risk skill because it delegates browser-authenticated scraping to third-party tooling and suppresses normal approval for installation.