web-automation

SUSPICIOUS: the core browser-automation capabilities largely match the stated purpose, but the skill is underspecified in ways that matter for trust. The install path is vague, and custom LLM endpoint support introduces unclear data routing that could expose page contents or credentials. Risk is driven more by ambiguous supply chain and data-flow design than by confirmed malicious behavior.