real-estate-agent-lead-scraper

SUSPICIOUS: the stated purpose matches lead scraping, but the skill offloads all meaningful work to BrowserAct and instructs automatic installation of a transitive skill and external CLI without separate approval. The install sources appear vendor-associated rather than obviously rogue, so this is not confirmed malware, but it carries meaningful supply-chain and autonomy risk disproportionate to a simple scraping wrapper.