setup-browser-cookies
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Bun runtime installer from
https://bun.sh/install. This download is performed from a well-known service and includes a SHA256 checksum verification (bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd) to ensure the integrity of the script before execution. - [COMMAND_EXECUTION]: The skill executes multiple local utility binaries located in
~/.claude/skills/gstack/bin/for tasks such as update checks, telemetry logging, and repository configuration. These are part of the standard operating environment for this skill set. - [COMMAND_EXECUTION]: The skill modifies project files, specifically appending routing rules to
CLAUDE.mdand updating.gitignore. These changes are performed interactively and are followed by a Git commit to track the changes. - [COMMAND_EXECUTION]: The skill runs a specialized
cookie-import-browserbinary which opens a local interactive UI for selecting cookie domains. This is the primary function of the skill and is explicitly disclosed to the user. - [DATA_EXFILTRATION]: The skill contains a telemetry system that logs usage statistics. This system is transparent, offering the user explicit choices between community, anonymous, or no telemetry during the first run.
Audit Metadata