kogiqa-mcp-browser-automation

SUSPICIOUS: the skill’s browser-automation purpose matches its capabilities, but it extends trust to a third-party MCP package executed via unpinned `npx @latest` and enables agent actions on arbitrary web content. The main concern is supply-chain and prompt-injection/real-world action risk, not confirmed malware or credential exfiltration.