agent-browser

SUSPICIOUS. The stated purpose is coherent for browser automation, but the actual install path is not internally consistent with the apparent official project, and the skill relies on remotely fetched workflow content after installation. That combination creates a high supply-chain and trust-chain risk even without clear evidence of overt malware.