novel-assistant

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The package includes an internal "browser-cdp" skill that explicitly automates a Chrome CDP session to evaluate JS and extract auth tokens/cookies (and contains commands that can kill Chrome processes), which are clear capabilities for credential theft and covert data exfiltration and therefore present a high abuse risk.