find-customers

SUSPICIOUS. The stated purpose matches comment-based lead generation, but the skill's footprint is broad: it installs a remote MCP package, edits persistent host config, uses the user's platform sessions, and routes lead data through an OPC backend/customer pool. This looks more like a hosted growth-automation integration than a simple analysis skill; the main concerns are transitive trust, runtime package execution, and backend data routing rather than confirmed malware.