scrape-leads

SUSPICIOUS. The workflow broadly matches lead generation, but it routes data through multiple third-party services, relies on undisclosed local scripts, and requires several sensitive credentials including a Google service-account key. There is no confirmed malware or overt exfiltration endpoint, yet the trust and data-flow footprint are larger and less verifiable than the skill description suggests.