nodriver-browser

BENIGN with elevated operational risk. The capability set matches a browser automation skill, and the main dependencies appear to come from legitimate sources, but the skill is high-impact by design: it can use real logged-in browser sessions, act on arbitrary websites, upload local files, and optionally disable sandboxing. The biggest concerns are agent misuse and prompt-injection exposure from untrusted web content, not clear malicious intent.