browse

SUSPICIOUS: the core browser/cloud capabilities and `BROWSERBASE_API_KEY` usage are broadly aligned with a Browserbase CLI skill, and install sources appear official. The main concerns are transitive skill installation, broad action surface over untrusted web content, and reliance on an external globally installed CLI that forwards credentials; these are proportionate enough to avoid a malicious verdict but raise medium security risk.