twitter-x-business-contact-search

SUSPICIOUS. The stated purpose matches lead-generation browsing, but the skill's main risk is its automatic installation of a separate browser-act Skill and CLI without user confirmation. BrowserAct has some official provenance, so this is not confirmed malware, but the transitive dependency chain and delegated runtime behavior make the skill medium-to-high risk for an AI agent environment.