phone-number-extractor

SUSPICIOUS. The stated purpose is plausible, but the skill is mostly a wrapper that delegates its core behavior to BrowserAct, instructs automatic installation without user confirmation, and introduces transitive trust plus live-web prompt-injection risk. The install sources look more consistent with the claimed publisher than a random third party, so this is not confirmed malware, but the skill’s operational footprint is broader and riskier than a simple phone-number extractor.