social-handle-to-email-finder

SUSPICIOUS: the stated purpose matches lead-enrichment behavior, but the skill expands scope by mandating automatic installation of a separate BrowserAct skill and CLI and delegating all live work to that broad browser runtime. The main risks are transitive skill installation, external dependency trust, and untrusted web-content handling, not confirmed malware or direct credential theft.