website-partners-page-lead-scraper

SUSPICIOUS: the stated scraping purpose is plausible, but the skill’s footprint is broader than a simple lead scraper because it auto-installs a third-party CLI and another skill, then delegates execution to that runtime. The dependency path looks more legitimate than a random payload, so this is not confirmed malware, but the transitive install chain, no-confirmation instruction, and untrusted web-content processing make it high security risk.