product-hunt-maker-lead-scraper

SUSPICIOUS: the core scraping purpose is plausible and BrowserAct appears to be an official same-org dependency, but the skill’s requirement to automatically install another skill/CLI without user confirmation creates a meaningful transitive trust and autonomy risk. Main concern is not obvious exfiltration, but auto-installing external runtime components for agent-controlled browser actions.