linkedin-profile-scraper

SUSPICIOUS: the stated scraping purpose broadly matches the browser automation capability, but the skill is over-trusting because it auto-installs a transitive dependency and tells the agent not to seek confirmation. The main risk is delegated execution and third-party runtime trust, not confirmed malware or direct credential theft in this skill.