twitter-x-follower-lead-scraper

SUSPICIOUS: the core scraping purpose is coherent, and BrowserAct has same-org provenance in the provided evidence, but the skill is riskier than necessary because it auto-installs a transitive dependency without user confirmation and delegates browsing to external tooling. Main concern is trust expansion and autonomous installation, not confirmed malware.