website-case-study-lead-scraper

SUSPICIOUS: the stated scraping purpose is plausible, but the skill expands trust by auto-installing and delegating to the BrowserAct skill/CLI without separate confirmation. The dependency chain appears official rather than clearly malicious, so this is better classified as medium security risk from transitive installation and external browser-runtime trust, not confirmed malware.