tiktok-video-lead-scraper

SUSPICIOUS: The stated lead-scraping purpose broadly matches the behavior, but the skill materially expands trust by auto-installing a third-party skill and CLI, suppressing separate approval, and delegating browsing through a runtime that may access cookies/session state. This looks more like elevated supply-chain and autonomy risk than confirmed malware.