open-gstack-browser

The skill is purpose-aligned as a headed browser launcher, but its footprint is broader than advertised: it can alter project instructions, run setup/migration commands, and commit repo changes. Install trust is mixed—better than typical curl|bash due to official Bun source and checksum pinning, but the core browser tooling still comes from repo-local scripts/binaries published under a personal account. Overall this is not confirmed malware, but it is a medium-risk skill with disproportionate maintenance and automation capabilities for a simple browser-opening helper.