ego-cli

SUSPICIOUS: the core browser automation purpose is plausible, but the skill materially extends beyond a local browser helper by requiring transitive remote skill loading, granting broad shell-backed automation, and enabling real-world actions like Slack messaging. The npm install source is more credible than a random binary, but the undocumented dynamic `skills get` model and broad action surface make the overall skill medium-high risk.