youtube-comment-lead-scraper

SUSPICIOUS. The stated scraping purpose broadly matches the browsing capability, but the skill’s footprint is enlarged by mandatory transitive installation of BrowserAct and its CLI, plus instructions to auto-install without user confirmation. Provenance is partially consistent with the same org, so this is not confirmed malware, but it carries meaningful supply-chain and autonomy risk.