browser

SUSPICIOUS. The skill's browser automation capabilities broadly match its stated purpose, but the --profile option is highly sensitive because it imports real cookies and logged-in sessions into an agent-controlled browser. No explicit exfiltration or third-party credential routing is shown, so this is not confirmed malware; the main concerns are session exposure, localhost browser control, and unverifiable local helper script provenance.

The code is an explicit browser JavaScript evaluation tool. It contains a serious intentional code-execution capability through eval() and an unauthenticated local DevTools connection. This may be acceptable for tightly controlled development automation, but it should not be used with untrusted arguments or an exposed/shared browser debugging port. No credential theft, exfiltration endpoint, persistence, destructive filesystem behavior, or cryptomining is present in the fragment.

The code appears to be a local Chrome launcher intended for debugging or automation. It does not demonstrate malware, credential harvesting, network exfiltration, or destructive behavior. The --profile option copies potentially sensitive browser data, and the unauthenticated remote debugging endpoint on port 9222 could allow local processes to control the launched browser. Temporary profile cleanup and stronger endpoint isolation are absent.