twitter-x-post-lead-scraper

SUSPICIOUS. The stated scraping purpose is plausible, but the skill’s footprint expands through automatic installation of an unrelated third-party browser-automation skill/CLI and possible use of existing browser session data. This is not confirmed malware, but it carries meaningful supply-chain, transitive-trust, and credential-exposure risk.