web-auth

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose and it includes good prompt-injection hygiene, but it depends on an unverified local web-ctl plugin and a remote browser-binary install path. No clear credential harvesting or exfiltration is shown, yet the trust boundary around persisted authenticated sessions makes the install/provenance risk material.