saas-company-lead-scraper

SUSPICIOUS: the stated lead-scraping purpose is plausible, but the skill’s footprint is enlarged by automatic installation of a separate skill and CLI through an external link, with explicit instructions not to seek user confirmation. The main risk is transitive trust and autonomous dependency installation, not confirmed malware.