website-schema-contact-extractor

SUSPICIOUS: the core data-collection purpose is plausible, but the skill expands into broader web research and instructs the agent to auto-install and invoke a separate BrowserAct skill/CLI without user confirmation. The main concern is transitive trust and autonomous dependency installation rather than confirmed malware or direct credential theft.