aside-browser

SUSPICIOUS rather than malicious. The skill's capabilities broadly match its stated purpose, but the purpose itself is high impact: it gives a proprietary external browser agent access to the user's authenticated tabs, cookies, history, and websites. The main risk is trust and scope proportionality, not hidden code execution; requiring an unverifiable proprietary CLI that can act inside logged-in accounts triggers a high security risk floor.