reddit-user-lead-scraper

SUSPICIOUS: The scraping purpose broadly matches the browser-automation capability, and BrowserAct’s install path appears publicly documented and same-org. The main concerns are automatic no-confirmation dependency installation, transitive Skill installation, and reliance on an external browser runtime for prospecting workflows; these raise medium security risk without clear evidence of malware.