setup-browser-cookies

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Bun runtime installer from https://bun.sh/install. This download is performed from a well-known service and includes a SHA256 checksum verification (bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd) to ensure the integrity of the script before execution.
  • [COMMAND_EXECUTION]: The skill executes multiple local utility binaries located in ~/.claude/skills/gstack/bin/ for tasks such as update checks, telemetry logging, and repository configuration. These are part of the standard operating environment for this skill set.
  • [COMMAND_EXECUTION]: The skill modifies project files, specifically appending routing rules to CLAUDE.md and updating .gitignore. These changes are performed interactively and are followed by a Git commit to track the changes.
  • [COMMAND_EXECUTION]: The skill runs a specialized cookie-import-browser binary which opens a local interactive UI for selecting cookie domains. This is the primary function of the skill and is explicitly disclosed to the user.
  • [DATA_EXFILTRATION]: The skill contains a telemetry system that logs usage statistics. This system is transparent, offering the user explicit choices between community, anonymous, or no telemetry during the first run.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 07:23 PM