y-combinator-company-lead-scraper

SUSPICIOUS: the stated lead-scraping purpose broadly matches the browsing capability, but the skill’s footprint is expanded by forced transitive installation of the BrowserAct Skill/CLI and explicit no-confirmation auto-install behavior. Data flows appear mostly consistent with web scraping, yet the trust chain and autonomous dependency installation make this higher-risk than a simple directory research skill.