website-demo-request-lead-search

SUSPICIOUS: the core website lead-search purpose is coherent, but the skill’s footprint is broadened by automatic transitive installation of a separate BrowserAct skill/CLI from another publisher. The install sources appear official rather than overtly malicious, so this is not confirmed malware, but the no-confirmation dependency installation and browser-based processing of untrusted web content create meaningful medium-to-high security risk.